MAL-2025-179022 Malicious code in ter-sohyun-srasasav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc2b9fa9b3d99b220571526fb67cd54e72a8fd8a232ec91d4afda37a406f87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172841 Malicious code in anak-jalanan-mdn31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb21de63bd019826c60724a46b9daeebd05795fd704ef579ef06199fdd79ee1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175434 Malicious code in kapvino-sovni-fafskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecffdafdb93bc054b336c18eff920a0fe07fb8926b626100521b27715fe79076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175068 Malicious code in kapino-samunu-mmdadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e6f0ecf48bdca4a42a5f431b402b5f8414ec8764d8e9f2eb8560da88a08df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175743 Malicious code in kupaio-kulaa-jokiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d561279910adf45252e4b5256e91168fbae024794936d9b3931edaa70e5d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176853 Malicious code in nuilva-vmiam-avs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdf9202fa04b6d7dd3fb190587bc4670a383a8db4e2f998f78c5e04783836a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176637 Malicious code in nuilva-bava-maba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1431e1536b38f4177afbcc8b4b7dc07157180d524be7a119c81fde2257764e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179172 Malicious code in thumbi-vs-trsyud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1ff9d7f0356a77d2503f1a99c564a39ed57ed268fb52bdac04d579e3a4a295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68549a49f4abec59faca51bac8747de80791bc3495773d559d830e0bcfd9b8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-yust-erts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3310d7e248eed16a2e63a3705f9cc2a585a888acd57c6d4bae6a8190a90fc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fa7b5381f375a02224c20ccec9e6df48fbc8315547e09f03d6fc66014f559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akkke-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103739e5c087af5207b3df544bc1f31c6c5e75a78eb20aca45187ea0184bc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godfiun-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15df0f391d3ced42a145d58c487ab39028f127caabeb6cab9ee1e649419059ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopanud-mafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c60f892bd912ac7f93b3631109eca5ecf685e088b4a511ce2ef09cf047eb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c723ca3dea31c23aed971b4a737be0b0e07ca4c7b25508c5199463629a55dda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271bcf5d1877463d1e6b8202565382628244726b2d6178be485f8cd74e298d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-taqaaibg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd32994998ff139ba6bd9a9aa28233af171cc7a505887e2dab2c5d86faa6c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be294550be7a10250947e7eea4c48a0b21070d31c1f8b8d7ace97e594921c4be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9c55a799cf6a7d4903d9c6f03145359df0cef7764116cd2e6f2530825fe6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvavihafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6e63cd27f368857c85b85e1c83d78428f6d2f9e8a5d2d33c7cfdeaa773ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...