MAL-2025-178751 Malicious code in tanabufir-softafai-dug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56ab48c771b87edf5c8499ba51cee38813ded22566e230b6e2701e10f73dbb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174764 Malicious code in hokage-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94f50d0589a2beebd3d9ebe37bffe8515e381ec41c60bc91d2e86a5a9baf4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179014 Malicious code in ter-sohyun-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583115e3afdf0952162738f157fb03519406ee45af27d73717fd6322ace012a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-afsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedd101947728997eb756fa36f1b708c577eeaf72d2e4fb7aad823ad1125f053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176246 Malicious code in namacda-kangtasa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c077bbebfee53a70bb19d9c3c518d3346af6bad02c749df302824f477e784f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-goma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12b54ce7758dfd689253ca037649e9e846d5f8acb6745dd1dc1f6b9f0948aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayyyyyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e13e1b108ea78c267e064c6752c7d06e453e7c8088ebd7e0e058ffc434a5f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-anagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cd089a4c27c14678213fceef60635b962f05605584f5c0e467f20a5db96010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173673 Malicious code in butanaih-asfia-darfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d457d03867068ebb7a13a315c7ca92ee7c877c3d02eecb751f98f602fb699ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173790 Malicious code in butry-yust-nutrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538ec4857d649dd9f18c7a6ab62094eb12556516126280c0f6f98635ee5f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175648 Malicious code in ksai-kilota-aioi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87c6a8469e27605832e940505b5ef6d18bb3ad370c9df0c48062442d95da6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3701e5021809c7d06de3073c77a81b5dfa51b1b6d8b17814c69a0de1fbd527f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-fadafuago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d506c9f983af991802b2f817562fef99934da8cf066e5ca7c1327b20264a88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-fifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186b2b49649ece88ad4124bbbd1d445e5c3a9ae7736b8cf8856a88531aed0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172864 Malicious code in anak-jalanan-mdn9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d95dfe224559bf6b7160605a44ff1387698ad1a1bbb1814f295c595e1b2538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a90b7ef3abd6ab136b7b3ee97c045d8122f8ea6ce6c849caf66d4bb0491ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176797 Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178169 Malicious code in rindaman-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fccba4b6adc0f8e211ea56128d253bae0630016ccecb3432a559974a2f0558dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176580 Malicious code in nuilva-avim-rva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199c3af219b4f4e2c6cb3a146f28e62e6deaef4416bed5312c6049476a9a5a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173232 Malicious code in buis-suinana-madibumovafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3336f0e6f4e7052c4884d7c61d1073d1358c30efc571f13f63817d50dcf0acc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...