MAL-2025-173632 Malicious code in butanaih-asafui-datajufahuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da59d7a006f186dc25b973f9527cee5b7f70b34519b9f50f7a19174b28663af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174585 Malicious code in haritono-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844b5f666641fcb7ed1b2ea33ca38e07cdc4b47decb13da81bf0a6f91643c237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-agaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9265548bbd550022f66995309b905d7881b2085669d7bce783754de772b87ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e963143bc2fadd80c98a33a3be3782c7b03a216318c5c0a04d64d053178193f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866a42110e39155d6cf7d4d75a8de04707160d10f50483fc0417c004e77d768d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1940b456e9bf84021f69f5bbfde592313e85883134c6a4351025a5d302eb0400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalaalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996c183d882ff7ba760a0f4939ad125faabac520c48eb4b8cc4ef4331b516a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef026346f3cc5ef0d70334c73dfa1a78742983399b4758bb8d4ca6e172c95109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rofdaadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f737ce426f8886d111837fab3efd59f3c78908ad0de57db7ce23d6ad9bc326b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-adagadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6558eb310fcb92b32e1fc2b1a260abac64a7044ba5acf93eeef4a8a1b0c4c2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f641bb8f73128c2dfd9f035cf57e0385f1bab539570d5b2fb5d6e98dfd86cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buth-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fa107aaca55bd63e221a0e19a10d51cae0c01ef36807b5683d58b5f9a54996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e20b68495f4ff821596f45890f93a750c61b91233b7aeac8144f38124b59dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaggafoi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3ea035a7fe69a9f54d4e5e21e383658676c9c241c4ec2afa8189dda0a4ffbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-manaado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc375e0e00dc268fc6a9d20a9d6a010c822086482615d3357529b51ea7ebb5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufaafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532de853dfbf582529d2638c1eb5819d3e36a4bbeea8855e81c89aafcba7e57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-ffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfee8013eca373e0f31a6d80186baf8ab91e62e48f7c701d622214f048f95f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuy-nuvadyat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72951812f3753e7c3ed70c736e4ef430ae639509ab8d770d1173ce4ccbff0410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-inava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3623fdadde6e61bd46dd97360f12631ca86b6c1220c3935b7db5cc459976d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imubar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3ce418029e9a3c085d9b96335879af2b20e45f9e6bd05908a16f2b47f5a57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...