MAL-2025-174565 Malicious code in haritono-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c0f5851e66d798525f710105ca5b014b1fdb52b61aae8447d01c57b1f45cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178602 Malicious code in sahunim-satudfui-fadafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9c05bf5ae9082d4b370226c1014c171a66ea49a892be75033f6136cad343de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174603 Malicious code in haruni-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5971fd93b24d1f62465e1a8809a6c35f11256221a1b433f0635d1e2f8cc9fb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174968 Malicious code in ira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4811338c457fbf4d7be6b6406c0073e1de6788d4a404adf731c86cd27405c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce051774213a763606f7c315cc465e722516179cec69806edee7d7027659575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-mass-snuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60184f2277dddfd7c3559bddbee8c785a7590f818e6a8cd855ed3404f899a169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-mamvfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d62b018e3cfa2eba75e5ecbafa02daabb75310e6c29ada746f516cd7a9c7363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aee34cc5651400f9e3c40028fd578ae287da983c012c7c64c86f10f2af7a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2bc5073dfbc665c2061d67be249eeea05b390ac62f266627afe22a24711689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-afasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb86ea9cb41aaf2fb30c0a08c9a3bca1a62f2c72dbb01a1c7683626ff44357f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4812eb0c44d4314d8a4ff0a2919e06864a630872280cc084e6362638d021853d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madmovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756f2c81930871805c13b4447801b58d045949dad5ed3489ec88ffad2bc709a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godivab-tumavai-dnainu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc29718176ba5ce3006846c30af2b38035d0e09d516a8412c068212d44e1f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c0bbb2a4731602c63c1e0fb3da63ece7c438a18c1d0e405d595b6e04757873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035fd0b6d5cbd6dca25d4c05616795f113b2b74810855969b0e7fa497d8be3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28939bdead8f5abbcbe102f6a7f323ef901e3a4c853fef990f6f2bc8c4dc556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf67b3537ee84ea2c7c238644600688e255d1215709cfb06871e1ac1c41e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2aeeb8f554cc5f557e57e3ec1f98b0c2591bb3ba8b7b7924d4803feb032bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-aar-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57eb4c4fc1f1bc6b1ae22381451c8f018308440f3d733cd58de75621823cd457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...