MAL-2025-175955 Malicious code in mahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca2ee2335f26294114a8a1378d6d8ea5cbe8d480273c9cd6f558d1ed200d7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buyavdia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac9f8f65ebc9ddc168d4182720761bbe883a40b768d2cabbb989cfbebdcfef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabiu-cufafanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc8acef83378cce599ef6b8a9a3cc21d059ea6952302164b5e465d4e5349f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumavac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596b2b2c07750f0f9599382b6134f24363491b00f4e80e6283df5988d27a92ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadodf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db4453b934d1c925fef84159bc9cd415ecaf6dbe09126dbef68fb14f994b84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sugoodaini-ngasa-abainu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ca0c35a861f7e0969cd886e839129611d410c895a450af5ac051cb6c4aa684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-ria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c92dbfacd2d91e3c4795764553310b0d132743aed4cd86d81d0a4ae6b36278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gdaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f6e95ffb8aa756651d2221fec2e388f43b9d7b9e368cc62b0a2c9a8733fd26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42672f19bea72846b66eb91d5aa7e8ae3bbe97d289d445a08c8a80c29e39b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174543 Malicious code in hakim-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e9010a82557beb6f7ed3ee3174fc9274018af61693deef2f4a9edfe038c4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174988 Malicious code in ira-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d950a5a3557187bb0d81828abcf926e87d8bde169f915cd0d243476e32402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173532 Malicious code in butahu-asfui-dfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2deb5893a1fa7feb544f0ab841c4b27bb89143798d741df57a112a760201e593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-ffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfee8013eca373e0f31a6d80186baf8ab91e62e48f7c701d622214f048f95f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176058 Malicious code in miftah-miftah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a177a268be549d58b8e13b48e41d765fa93e429cb8dbe2a74fa76ac0148d336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafunai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2d4924d5ebc989124ba88ed4bb993ab71f870661f5afd14e9d26dca2818ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-nafifgfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c608a9f0c4f1350ee0fd930836db6f5eb2d803b7a213270ef403afb46d1576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e1a35c125d305e0cdc817828def5d6208e3e65895b3472cb844378cf115f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-ihdsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f11f21934ad74510e32bfed572f32a67715f58f5b7fed8fb9a880205c5c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-maad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8134b5de742937c4de67788ea7d3eeff0581a4be64a079f14c997f9f75f62dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff1d45f4ccbee1ff0c04806232a847e413ed210cf3605f596f6fc26a51b4f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...