MAL-2025-176667 Malicious code in nuilva-bavaim-madbavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38bef00c6bd6ab362f468fe15a84523787cc2ee6c91297a095ac25a4acc287c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176304 Malicious code in nokire-kaguya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892e4848552c41be5bc300d2ad7dc71eeef00e805bb57988d09bdb93cf2f6b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putraad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def70595453667f13b8778ed51c73baec38dbcbaf7c360d0fc94ecdbd810acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177920 Malicious code in polymer-datdfsadsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3407d3714f07af923c07d0971fcc52c312c03361493ea435438b1f0a19575155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173231 Malicious code in buis-suinana-madbumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb8d18a558fbdfcb2a16d50b8705021c89e1659538779ab90b36414415986fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174195 Malicious code in godi-tufufaja-inubufaaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c54bbb75d2f87b2576f93ee928be1b2a28a603d45bc865ac54a627359a7f61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175792 Malicious code in kupaio-uloka-jaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67f0abf8da464594b0df87ddd490e70c8f45ff9a187f16d4c0df705eb59570a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177229 Malicious code in poglymer-ogaih-afggagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23e234a00624f3b5855c63f8c08b1d5c70c2464cbf16f2feba8edece52f0951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-pa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdda12fed28ccb4b14629aa54bbb8544e928f69f91e97c14e668f9bfc8b4fb27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176dda5e83fe0c96579d19f15d68cf8fdd970ece3e012a66f51724ed6bfdd83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namei-mala-abinaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec826fc805116ed2dc1730e82af49daaa9e1a0f86a6c8252cef1bc18854a81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomo9r-nsussfcida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72578ac6a987701d79be199bdd2ece9a8792e6600a197c00ebbbbc9ac46bc218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afdalhameed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff70a755655e9bc81075c4aa93de35490007cf3d7bf3cc45ba38c55e26c68570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170850 Malicious code in amjadkashan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576b633e1607c6690c2a1b6dcc9e7c9cb7de71d51205051af098cb2e2675ead1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa14715a954cf387f3957548a922ab0b51f559f940e6d9ff8e2c5b7b86f4208f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b49499de10b5239771d05a6682fc471475d2b1b727477d4e5cb48ec2e92f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6455278cdff6eff9cf0a8f0eb772762bf64bc988c3f28fc084aa1e251e40a035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521364930eb4d57f7fac3ad981ca3260b96011a1f7e744fde3e9ad3659b732c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705c2f034ffea819555a1309c6a9df958b47473603ee46bfd57c218a37fabb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tfa-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e63d183d9f71d9052ec7ee49d4202460af563ff9e499e037d98389eb7398a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...