MAL-2025-173870 Malicious code in diva-banbfo-imungsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517aa0f7afd82b6bced70247e0c81abf295e12f0b404bcf2ef1c983347e3a372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178807 Malicious code in tanura-sui-dufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762c40594f98870f1b08e76557c4edf56f40c9b7ef76762ad7b4064c67f13fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174216 Malicious code in goditu-tma-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082ef4ebb543f7b9e55b387500f173c0e73a393bf59ad84417d2049d3daeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175245 Malicious code in kapvino-socvni-favcai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c78f0cb26a0130cbb93fd1b602bfdd57de0a8516f3aad0216d8f512653b795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177122 Malicious code in nuyar-amar-afdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a37aab815a51fb280f9f537bfc0d48354cbd977cc57ebc70636c64c35929b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afmaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712fd1241064f45109470438f880867e9197d1a26465e9d6c96e2a741b528ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buy-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b599342ad2a8e3c2e550e77f14685e0a1e5a9ee423f41378cae33c17dab394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-drgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1902611482a62127cb7d36f84f2a68e042e376a7287cd6f3a84f53cda1c99c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodaasobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8025b597dc410a296eacfb033beef616af09d3f4a0c663643d20fcc47597b7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-erws-puluh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd544ac006a871874eed7ce9dfdbcaab85948083090e85b65c9ffcfa8e201b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5989f694330ac641f6bc356802a34560b47ace1f8c732f434a074a4cc678c65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93d5a12d1abbd9551a43649e118212b46099678b0343bf1e838e8f070ff8451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee433b88eee606e8bfe5dc692c3522855d2bd85ecd72f5c02453e085a35c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c94f875f6730a78a5c8255642e704683c6d8cf886b97ebcef06cbf2a8f9ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adari-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdba37347d039fab0c2e20836dc0b68f4e1580d6760e104bb28f2cd9ebbb1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusafasdagan-nasduat-bais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d09fdde4f85a1c616154a03bda7f1916abfe0ff8236ce1baf3ef121088b5afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaaopoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb32c2ee2a0511029a6da620c987ff58dc5f45dee0d16a04d22434f5c44b37e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abttteng-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c46616923670e8aea3380a14adee4ce9ae03663134f082119ebb891923e6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiha-aftfsfyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076c667ec96311f29427d4735ab55eb8e76509dbafe0af108453846d740bf9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-goafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278144f5242cb2646164ed63a8ae9d4cef40edcda53a84863d3ffea20b43964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...