MAL-2025-173944 Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socnvi-boasvobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0337761128db30040f1e04a7ca5ab5644d3f9471109f29620aced66aef0d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25b1c83f3e39094b9c614d3b8a2e29ae828d3971b6a682742356dc0e670ebfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagomabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622d7a12af0abba3423c282ea95c1a14e8aa5a2487bf817b0097e30877a00c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agag-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6933c21028951584f9f1a1f0ebd8ff79d3b59922f98c7aafa5c2175d99697ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-good (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6753b821f9228cd0cb31f26b0d9cb6549362717007318836694c9cbc8e0d74c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imanmabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e9a20ab5095e3f5b163aefa458789051309ff10a51ddc99b592755be3ecde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179246 Malicious code in tray-uozp-pran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ed2628abd10b1a53b2f0cc60f47c2d6185027567da1a289789412bd6a0e17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176477 Malicious code in nokire-nakaocil21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1687af3e543d17faa954e230a96768b5d6f14e0c6f5696d958dc9b3670120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174577 Malicious code in haritono-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3b6447ae11f33ff29224bfdb8dbdff066e192c3cca176ade1c42ed7125ec24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176988 Malicious code in nutravaa-manusia-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c71bc072f898a1a0058a9cc8a8d8c1b0ee18e7fb2c00478cba3954f2f64daf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175330 Malicious code in kapvino-sofgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6801a6eb2098d4942dd4d8b0b803a789a7b3ba72fbf371fd1671c704c6fd32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175917 Malicious code in mahiu-sutavbu-gainafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158af2b37ebd5a9c5c52a2af360076d936a402e9ef323bc38113335630120c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc29850b45902e9e71a01d67acfa495e7da771b0ca94ddb6ff6d83e62400cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-cumau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69365981fe8f56bfbab0fc799580eb3410076d349e41439456e39bd65b42d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-gaofgfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bdfaae6e470e282d64c438420887ce43bbbc775fb2c466ca9510d04e0696f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisoim-aolomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085309498e67044763fd3ca89827d12365209f6272bfa50e83371fe933fb1ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176608 Malicious code in nuilva-avmiam-ravo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcbef8d44e3ca9e1cc670ef86ebfe8c52cfee1098f010a57247421050582efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173012 Malicious code in anita-butaur-mgids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dc44a25a91942cfa74710fb7e6e62a2b704655537d6ce1f30b6f8e2a093209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178365 Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...