MAL-2025-179989 Malicious code in lookingan-nanakila62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852e61619f8b60bbd7d647e6d8c3f4eb4ee45ff5368789f09361337efbc84e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180044 Malicious code in teate-thy-py-buhip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bf59eca5cebeae3446f6d4907a8239232d595ab9716af06de4e4c2f672384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abttteng-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c46616923670e8aea3380a14adee4ce9ae03663134f082119ebb891923e6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nubif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf6b2d59dc159c5774478de9c6324e8b864a41f4e658cacc8e76daf9b18d273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e6cc488f3dac657c2ed6b2ac53989021c99b03224be44760bf6a3bd64c758c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a65417cd3cc409af14585032d67f8c35c9af380afea24e5531cd33be4467438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-mva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fb6b2e15d44d096f8adc819b9dc96a15087cf4c23552b359ec4aba9908feec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaka-jokioaasikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5912624b5beafe0dbdd1087324022a94b52e9801b23443483f1f0ec62a9006b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c839310308c94dd9aec8241a25e1a05a711d12095f468b2445d0ca19beff9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-biduran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da71015b21d0d690b48c34148b952411c7dc4aa809ef7a86f3a56dae026e89dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afmaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712fd1241064f45109470438f880867e9197d1a26465e9d6c96e2a741b528ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-fagafiafgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459b625c79096b6e4d38aad701fbb1bd871064c0792ccbd738944912ea953df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174148 Malicious code in godi-tua-in0dtfdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50728b0f494d5d2fa7bbbdfa3c4198c645af56fcbb2f8514173477b63650e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175067 Malicious code in kapino-samunu-mdadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a033801ba3361455c14ea7d93487c896376f49ca4f6ed75a8ef1bc949ad7695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174037 Malicious code in divata-tuag-ivga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f027a1ae2df06970ca9d330cc74638b0b2eea150a185547b145995b91c266c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-ratfaoaavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab54d4e0389127f92afba13ac25b142960b5e15a810d64af2e83983167675581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178033 Malicious code in polymer-ibhghhsigsabo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fce00ac42ba8a3ae17c14f36f55a8884752f55406db76f670437b46f9fd6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936362886453635fa0be1be2ec45e9ece18319e7a0e273011b2ed113b02b1948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d566cd553acf082e15777c8ecee3e0b02461094b2b8b146c2a53c8a4b2b5e964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179370 Malicious code in unimuna-safiagiaf-cuagaifagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f09f54688814ef1a436524b089161a056f8e1dfb6d5ad9e806b5630dceba5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...