MAL-2025-178893 Malicious code in teagod-naiman (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80d0e6ffaca4e52d85c219b989f6970a7709ec5edf726eab4c485b5604fbfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179024 Malicious code in ter-sohyun-srasav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7999bf0ad2ff8de5b5a2d9e1a2819dc569eba14778f80c965b54d0e530563acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-ravfoasiabsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d2ce4a29167b66d4af6e5ab87f2029d066f01b70febebe49c386ad8df731c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-cuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04fca612a121a1853c51c82e0d3a9163b5c63a5dd2cd850cc9feb2aa5c3de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radatidad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9eaa3120f96914b5e26603872f3e92dd87dbeb81b759d3607158e1e5cc939f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-pautyu-mutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf44488ff07edfbd0916d8dd503636a28ecd3baa2113b5ea2525afda918871a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnuuuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb43c0fb23faa573e0979b48a20c59abcee5dfda1dfc3d94e9c9219a6e8a023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbf8b408d2cbdd819b699de3b08f406061ff2b3efbf27ac276c7fb828c5edb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-fudagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edac838169bf20cbabfe6e671b92468946366696839bbe4394a2d0477198255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-abafabbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e6ddef138d99453d15f240495f4761536143e52dc139c886ee6ce3b4a60708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-aalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3be2870045231e65451156fed04385315a55709e1f6f5d2d201484d6a77ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutraa-nutard-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2b2e9b0ba388a1385b18ea4802ba5225c8ddc854bfe82ce136105045a23918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef026346f3cc5ef0d70334c73dfa1a78742983399b4758bb8d4ca6e172c95109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-vfsdfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b4aa05d597bad155be7ae201aff078f7c25da91aa27aa075911c8b1469992a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55981ceacbeaec2f05e0a5ed1e4ab28bec5629a5d9599f2332b4a80f717d379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagiuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2bf379c2571fa8a848ca94ccf5512522291bccbd783bb3bbf572e25e6b39db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68549a49f4abec59faca51bac8747de80791bc3495773d559d830e0bcfd9b8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresd-dsgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45b707860ba677a9c88b9d0e19e2edc867e266f5fa0f047237c5601737a2b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202dac898257f5529de0d09101a26041a1b58afb0ca416de01fab4f5473b1cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaaafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b6d3e8b6fabf9cf375b2652fc84b826fea20211793d8b5a83f0e6a31dfeae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...