MAL-2025-173941 Malicious code in diva-banubo-imani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cad999f66e7c49a76732ec586a0c25b645ea73f1e8d5b751a66025aa72dec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174159 Malicious code in godi-tuam-inapunpayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2d347455f9d887ff371ea9d8c689f8c85f9f79697089b305488f29612ce430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179314 Malicious code in unimna-safafi-naisffis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89f9e9b5c97a52dd1b753de7d8e1397d162ec0a3a7bb6a48ce1795278cf695b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173925 Malicious code in diva-banifbo-imibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0b062a53221735998cbeadf4e42f8c38d39c2b728cc1e5de8225462f71b760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172957 Malicious code in anidata-hds-maad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8134b5de742937c4de67788ea7d3eeff0581a4be64a079f14c997f9f75f62dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174776 Malicious code in hokage-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29277841074ad498d57cbb0b4b1a56dd420aed9a44cbb207e58d778e28eec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176063 Malicious code in miftah-miftah18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203629dbe146778d72bea598390d816e8cfcf09dbbce2d737c6802bf43726774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176712 Malicious code in nuilva-bavia-munvdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9ce1ccf976ac0aa45189650c377da439cb4efa4c0fb18447d7ac1d71554265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172669 Malicious code in aake-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6172a7e35d00dc9f2623e1c5bd4c53a2afd21540097b8466cb406118fca5c9da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-asai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6ab8587c2a1ab7bcab2f591c823642b1793f71c38b82573a1d2105df2b3298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c0a97e81554d4e9ff9d8cd38d90b09b40f8f2da2e9dd91c43097ab1851901d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-giodaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843308a7a27d23bcfa8bb616b47bb2620c0a91aea91d82ee6cbc634b78f16a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0e7da01e2512a04484d1d0cb33c8a9672bbe6f391bff7e8e8ab582ba26cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afiamafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1532f2bbd01f3d621417a818e3a6ba8b0d84eb3d1c079e751138dd4050c5970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-rea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98d858344d4b01bf95aad92b45a154956e806f2c2d722e7fa0c3aaa2acb8a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0d499c027cc9cd1af799247a6980bcb608b3d0f24e7598dda2646314453d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-asia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8f65f2887a0afa780176bf72f7e42f1dbbd50f034464c4140a5baaaffaf52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-sdfsda-refus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7099e375f63c288d1e3875431f27a30155d18681969b6ce9ec8fc6e40230cd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46506bb402537bcc021b663aa507a7a8c7a1ba2ef8877cecb4cf3aae70158c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09176cb5e314a748407172eebee9ff2ce97cf36ee4212a529073fd3ab22268b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...