MAL-2025-173241 Malicious code in buis-sunia-muna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47d9414011fe320f084dc3b88763f827c851fc50956fb12d38cded42a9db537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177569 Malicious code in polymer-aavof-afafvbgdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1c04fd28b40db36732c09ba36509259bd5f4c2ebe38e7a2db2f95ca6023845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuuuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e191faf17a764a976e40c73a521c7db599f7f1a6bdf1bc9b52fa3d89a258ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunauyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d7c3ec6bcbd301c76eeab3c2b751331fe9f26a5ed5c6b26257ead16ddfb4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a6e5d27d6d7c4dee5df04c3054b1fad0608567d1a377c43c9a9833c4e9f96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunvu-mucdivdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9211b373e1c4f4728d80b19f3e74bfa6c0d76fb30ff0cfca44bd1f7b2130b383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-anagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fe6a3d2b87023ed82fbf3e0a8c21ff6ec761dabb0f8c677e9a44b489a4b540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3171e610e287929a3d2d6de3b4a69e448f3fe4408e39713694d2036ea52cfc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef50e15cdf53c6dedc610fec50cecc627ca1c8f67a6001d44ddee47079e9e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172962 Malicious code in anidata-hds-mamd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f74a6221e8cd45f15ebf0b1af82626b61b576095bd0f648c76fcb885a089ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaahga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0566d0e65acb2deca32c63e77d92f0d27261a1cd640ae0a97e2c6e248982ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tea-tred (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941becd8992ebe8fac2f5d0e1240f2a9bfd7273fad75a4c249e2d18f6320339e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172663 Malicious code in aaanuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c4857174f2c31fb4465a8e816d2c964c6bd76649126a5de9279b8e9248c53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174698 Malicious code in hitachi-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dde271a62d8a0be2a8317a66afecaa89935ca2c878864b6b45f9cc578f2b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fabasifaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d6e26d07096698a916e5f8454d6c05a777bb36f43fbbe3df9398d39b770b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174039 Malicious code in divata-tuag-iviaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8025714ea4bb0243b564a1eb3afbf152b129af95e959361f3cac7172ea2b47f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3218dedf12c474433b6330dc36bd3190d694ec554211987d8713d5cb80f5c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f1173e914293848277dc10dd55f818e7011f187015e39d1612aa37e46a612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d9b8e346e0823cde1d4e03135ff174256db54b721bd5cc922ff5373924872d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172885 Malicious code in ananda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6572fccdcfc4051e4fc9f0a9f27859225b9f3e7787518d50c91f5d5961f5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...