MAL-2025-172766 Malicious code in alvino-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defb12384bd8f44458a46e28d0ee1bdbaa1f209ee7c26e4698f5383f8c77bd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176837 Malicious code in nuilva-dare-adaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6379fbe336249b36c8d2e222f4bf2a20257239ff3e213ba5c55fdc536834e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172690 Malicious code in abdull-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018c24561b1ca51a3dd115618cbeeefe92c8ca5eacf56af6ac1701c18312623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173946 Malicious code in diva-banubo-imanumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03015eb1eaa89f36edf7586b83abe13712b8d095bee72bf764320e1230b3f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177419 Malicious code in poglymer-ogmimh-vgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fb2b7ed28f1a3884fa63dc342221d63aff4600fd6aef0c39d207d5c23366b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178600 Malicious code in sahunim-satudfui-fadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56c71aedaccaa1e97df5f5e4497387ec2c84de1b918da0ebc1a625d47bb7054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173294 Malicious code in buta-f0bobuna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7155871d768eff20f37e868a770c8e43658bbcaed5545f33810825fab95b5f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabaafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3298cbdb8ad8dc83582f94306545ed8abd42b3ee1025c452c3808d30aed23dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-racing7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6b68daa964845a3f024549385f08fc963eb820a9cc6e14595f8ec873b20f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-olaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f810da48b460d941c87035f35ab3f59d8d0a23d60549c1582b05a9400d2cbab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunabui-cumigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bfdc258618040958f5103da3b5372e707c2420149a9d8031f8f1a1bb35864d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-rv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf18f146841202d549593d2f5d98eb5704340751be45451f7840fb3ee971196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagoia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dbe1b0087a1eb8931eb7ecef508563fb34d988c9f7032f7ce65da67e0b774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adar-bidut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3b8980ad10386f05783e2efecab61c1aa18ce5e2f4f3c726d0c1b23b0c236d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trtean-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7068dd6b382bc83e58e1b6ae0906b74ea094c60e60e40dc63aa442ad9280c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afusfafi-dauafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da95fe2ac67bb8891ca1ae83f4d551b6498f5c970ea548bf757ab70af0f8570d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiaiaf-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2387397f2deaa825c2425987309b92e2c31f9d4e982768668b008fc9bc38fd52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimana-satgub-naaib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fd2939534b74750baf0cb826e07fed8399037edf127f256224f93f8e4585d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...