MAL-2025-172806 Malicious code in alvino-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03c3f5951d26e7aca247ed5ffd1c5851a189c4141aaea70517d004714a61459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178354 Malicious code in rusdi-marina-nutru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ab4f378c81bc76eac2203b999817fdefa7baed0bd834c169b4a0d267c24148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176294 Malicious code in nitaaus-5-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a8cecde1e1fc2091d9dba4c71827ebdff10a153f0edb5908eadba6cc16c6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179289 Malicious code in tusaya-s-sdesasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6235449b77dc1f2eb8f8250e111539fd27445edb1c784abaa02f72e76643f2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tuamva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07fa8d043912e57aeaf01c3e41edf547b8150278760b07367c4555cf5eae7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajapnoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd55c47a4ede41cf50d1824850ab838311bf715643c425b46102aef82be0377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c2614e0a3c485f2e7201cc31405dc23f90e486972bb76ce07fca1393278840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-igaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3939eae8bb22644d710abcc4f2bb04989fe6a2a32c6a6d2e45a62a7df3d3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hapdits-rs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ea0132e585f8b1ad9465aa02d50cec1f58a7f895af27b98e658c2414554a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-roffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08809ef594a1cdf47182a5eed82f8a4fba938870524c3a007e4a062247ee1044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19335e55ad193359f11a2043129cf1013902cd082dcae9bd3da8fbfe6c4a2bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucopoivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4b56a3173c6c0f57e6d565210062494fc40cc5d2492b7401589f34d19947be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b385612a66ce55d5769f6f4643f9f36f0159b383dbdcf8e34e30e636dc6ee68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-pearst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b79bc4dd9191dd424812c30d986baf1a17d3f17ec8be946e1014ff40d6ab422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-houd-mavida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578a132a4ed0c0322b7c23a965b77d8e259f4aeaf0d6f85a64602cb2371585fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a040e04e0ae6b7bee72a188f12635daa44519630da58e99584faf4e064473a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f063445b35750f510e52b772f5e670fc168d6327cffc492dd2b61d999ed304d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9826d732d789c1afc31f25b6ecea91b05b4efa71f0d1ac0843b46686ed19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadibafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7493ff3af930264380720224c4b3c2235b99ae488e4ef95241228a611061e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d25c4211688d818f181dbd2f365a0c63a7f6c7fad00f3b268066f258216800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...