MAL-2025-181324 Malicious code in @akunsansan0/pucuk10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada5f3345c06278bd6c8e2ad2a4a5407093c1a3e0d6d61210edfa9d8c5c9412d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5096d4b84d33c9e3a0f0196b931ef3ce3c4e70f376d450ba3fc5fe4a327bc52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181202 Malicious code in @akunsansan0/biru17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e585a6d76b1c0889e4e1033a82364482527aeb29d6ebc314d408ef48854b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nifar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512822aa5c71eb4571b5786a970d7e1902fa43f704268912d45335517b25d7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179640 Malicious code in kisut-afncg-avaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0c04531f02e82b4ae9717dde435d7fde50b3fa2cfc0bcff47e3da48efebfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d95ed8af8b8e8ab884ea58f5255cad6fea5d523c74c9240cd81da53be2d9e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aifgfafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a1ea64293192fb3cfe84dbf123465580754435dda16078499684815685e9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-muabn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9627f04b08e21173399f5083673d821330fb2759fd5d55c254f32bd5e9a69d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-ka-ahakaij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6caa785868b8b7470740e14293e39018240880d1932ba0875360e0ccbb4eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932bc33c6478912fbedd1e7db522bcd4d2fee122a9ba408d810194baa4563094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173387 Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogodaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d814e6ecaff4819d17c0596b38c1f3db2dcc4875b61af1de112bea60d5c74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178101 Malicious code in polymer-tehh-1dfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a545ff05c9e5644e38023b2528fbd94c72605c6082120258af2e1397e3d658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178593 Malicious code in sahunim-sati-fadafuif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54fe3ef5dc2737309255124e5fb463527b90a2b282c7cb8f5eb22af9e8aa45b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivanaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b980f39d5075cfa7de3ec8c3a1b2fb5bc79d1a4755ff9823e9f01e1685aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0489ed55f020f2651b0de98efbb0146ecb8b3b7fcdfd6e4e8c2bf0061fec6b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanabdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6ed025ff8404821e1f3684303079187c8f2b9301b3dd97f6dc68d374e0c0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-odgafdgagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a78c98854a9a88186ae0503c64dafe8bfa1ca55f63b51154a709e4ddc7ed17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177211 Malicious code in poglymer-ogahh-failhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f216f2febb390f42ab1bfb5af1240b8c48af19a51611e7b3a58f55d211962d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171926 Malicious code in stellarhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efde1a229d98659ff10d9a0ae02fb6d05b769d1679df279190c1e2b23ebb9805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...