MAL-2025-173927 Malicious code in diva-banifbo-imigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b9ee0fc9e8ef55bdbaab3c747481a5b97caf841869f89f79c176919078eda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177473 Malicious code in poglymer-ognagah-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ea69a9298df1308b797eeebd91bc2c4fb68413f59bc86145af882d0839c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173818 Malicious code in digo-kaimi-aiokoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5495b7ff37f9c6127675f8b50cec2bcf5d5d4e5d9b9104673d9bfb7065f7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174373 Malicious code in goodafin-nuiyag-gifaftuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8c4098b218c73892703a594ba5367b68fba69f4380c4dfa06daa505a25585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fed384f1319838c815d9ff0bb0dae22baccf9c31121d49b3141358a8e0ec7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7a9a79985f90a362b0fc179a6a803ca752bac487f7d99f6f11899d31c2531c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-mmabadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17207d8fbccc5fefb303e4427e4cadc6afe9cbadaa9a7b9c9f900eb67b5c3599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabiu-cufafanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc8acef83378cce599ef6b8a9a3cc21d059ea6952302164b5e465d4e5349f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rsva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b515b6f3ed82ca212984df48204484b93102742bca6085bd9bc0f7a70ee3b49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-honud-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebeb6745ec29d05e5eaf43c5164e4b37b68652d54b5c317aabfe7f9d8cf7cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopud-maviddida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a661f75086d2ffe558614526e7a5ff357a33b96895f0b6d16330792b67518f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3701e5021809c7d06de3073c77a81b5dfa51b1b6d8b17814c69a0de1fbd527f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25cb24bd992c74a9aadc4a39bc092e101a1a181c58b059a070449eb906d56b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1494b2a4fc78480ce92cd0db21d5c78bd88ad4753701d72ea79b70282082433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17db2c53af2049d4ee70883dd8f778d8f97996fa18f912d9d2673cf22c4ed960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucoposivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee08c7ff64dea964c75f3c2307b89f5652ec6682ff18c97ad4d341414c831212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e5cbcbc4a1a9af06969c111a0c7747ca0bda54b5af3b39b0ea1cef69e6bb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c0f06514079fe6c6dc187ef41c25cd194e867ea8045cd11233165043e30e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564ca415a5c1284ad5c44b1374d12c2017c4f4ac0060b9c3025c6f09995ffa17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...