MAL-2025-173081 Malicious code in bafai-sunabbui-cufuamigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e9b44a02516394a19f505a1459080055e450b76bdf20240c3f31afdbdb49e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178820 Malicious code in tanuria-safafai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b1c8d3db573ced2f426a7f99988df2772a698ebb204eb2dd66a3b30d0cefce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178589 Malicious code in sahunim-sat-fadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ace4e3e0d18451f303b4965a3186367629cd0f7331a98186d503d6b698f7ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177816 Malicious code in polymer-avoadfifa-abodfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac06882e692eba90f24c8fac77fd9707f0c680b5280ca3cc94d09caac6bc0ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174565 Malicious code in haritono-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c0f5851e66d798525f710105ca5b014b1fdb52b61aae8447d01c57b1f45cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174772 Malicious code in hokage-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dcc92fe065695726374d23e9119267b8c12aab6912c954276747e1b9dd0bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghab-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0815909fe53b8a5126ac6e628acbef878d33fd61268004c0f3018ed053f3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-inia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1232d89492a6bc1e4f8ac1dec0174f299e3f7d72bfbd4fedb0d42a44d10d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-buyaitatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce73e87bef04e0d94ceb10b6909c4d54b6e046f8a818663fb8d740414849e85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaiali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515244ae2725a89485ea8e47908e14b7e47985c436a4713b26f81c43037e565e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbfafgaaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb85a8b1f186fa7e4f19033fd533dfdb2be0ba3bd1439d7ec3676da9fbcd65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-ka-ahakaij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6caa785868b8b7470740e14293e39018240880d1932ba0875360e0ccbb4eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dubatgifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e464733f36713cb458c1619a7eeb7358a7db880ea9c83937962736d97744b29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsghab-agaigada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1752ccac622c19ca1a174b1d2d6582e6749a42d804db0f9ccf03b593a4e0bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174020 Malicious code in diva-tutai-inabuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db58a24fa918e83391da637640e53f3c073bf14508cfe6be7f27b2d38eca981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174488 Malicious code in goodain-sangunu-nutagfiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f4e12b9f07c27a4de4632f69078e9a59bf44ba2df1c5f2cb84d063b23748a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176933 Malicious code in nurai-sutif-dagibauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81039045ba1430c458923acdcdc89bc199b2587733d2d96d65bc37863ae5439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179374 Malicious code in unimunaf-safiaiaf-cuaaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454cbb28cf217b11cdf7018b34680bd4277a7b65fc6a991258772fd7677301f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178412 Malicious code in sahnim-sati-anjifangaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada91e8be789ff1a473821536fc1f57880fc91e0083811b8c7fe43c6f511a00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178221 Malicious code in rindaman-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb982df2248236641487c4d5683d6f526c9f3ff7b7a744aeae9afd8c7744cbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...