MAL-2025-178755 Malicious code in tanabufir-softafai-dugat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c54580a90b6ffa8cf363cf267ce70005b4bf060be7ad5a84c2df5362c03385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176218 Malicious code in munuafai-sfnif-cauaguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a2dcfa533539e869fda587ee4d10527f4e44fa000034bd8def7e86ac204659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175279 Malicious code in kapvino-socvnvi-bofafanavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baa15ef04b936a2c487f116e81662f39c6634054018f218f65f717b1aeba064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175919 Malicious code in mahiy-sutabu-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127622fdb20fe9dc6f56050cf2c5ba8b7bb3e8455b6507c1557a143840c65483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aneeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c61a9a36e103088ce1215539600a61d4f910237d5f715c3ac9b45330d60aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a8be002480e7dfc819fd0c6f4f8ceec0c570f2c36c842e23771a33500a420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufufaja-inubufaaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c54bbb75d2f87b2576f93ee928be1b2a28a603d45bc865ac54a627359a7f61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaagfoi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a54770154b698a506b269be4c5e303066faebcc7683a62fc8accaf4acd734e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-vsgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18eadd5a4a447830798c5a645a3c68e9a50a38f5d454d0abfae599a40700468a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-srassav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94015ce607b0e0ecdfbb3731dc35d2263630a005cd6bc0fe4876c08270637922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusd-setya-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d41fc4d8cdc92dfbcd581e3bc4aca03f4132e16262650d97442a7e1af5ee84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6848bf7aaa9afc8374cf6ffbdbaf977fc222b5d006404a0fa71f4f800b0ee97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff49bdbae94ad85b94b7473e6d7e1f03ce06951cb2ab7f0bb29ffb55ed688021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fnai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c0a33852aa58d83c6788b3bea20955f07b5b1138805c2ecf1f6821fd7e9b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62668dec013e48f09a70bbbb74aa19a18c27f415b260a8ab9399c154ef409d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-nutus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a17ff398e28b2ff3cfb532ef6dafe7d236c9a7b43123a39e121629521f759a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aksogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e554eaffdae5c0aa313702159d6c1e3e1b6ade902ca27b0797a6675a432ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-dari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d14c6eda6082d841d7166fad3485ffccd0624f31426601d5842888003e529e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bb78b26366fe542c314025d03a9a4d203a05f3490c0accfd1d1e4946993494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afamiasahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2226d3162847468e2f9802d9a11f61e1fb978696e57b92aea000769ef894399a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...