MAL-2025-175924 Malicious code in mahiya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75efb949d8bf5f037d9a12178dcf80fe5f12f7aa07d1253a18b42b28fb8f45b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172679 Malicious code in abahh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c48418106b8a9aa3c210ea4d81b8eea08b0527f927f1a6f55c9926c2c3e587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-agaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9265548bbd550022f66995309b905d7881b2085669d7bce783754de772b87ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e963143bc2fadd80c98a33a3be3782c7b03a216318c5c0a04d64d053178193f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866a42110e39155d6cf7d4d75a8de04707160d10f50483fc0417c004e77d768d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1940b456e9bf84021f69f5bbfde592313e85883134c6a4351025a5d302eb0400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaka-jokosimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29add719d66272f523b250b9b70ede784b8e7d2571506f7dab1d43f633d9e42b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalaalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996c183d882ff7ba760a0f4939ad125faabac520c48eb4b8cc4ef4331b516a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfuadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240225665644a32b73b9612a7616fa1577d6b46d125962efc55a8ea193b0165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef026346f3cc5ef0d70334c73dfa1a78742983399b4758bb8d4ca6e172c95109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b71bd7e36522ecc6896224eda96ee8f2f0228f1195c4ad82cf3c7c368ecd273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rofdaadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f737ce426f8886d111837fab3efd59f3c78908ad0de57db7ce23d6ad9bc326b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratofafoafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512a812225f6d78e2da11a599f2aed8927a17c2a84b6f972adf7db356910949a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd88c25038aa70cfcb721d1d02d85fa57ad84c6091d441981a518ea14bcb025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimnaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b69a4779909b1af9d8d477f9ea7e7a5ffc9ae3387053d746e47e45eac55331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-adagadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6558eb310fcb92b32e1fc2b1a260abac64a7044ba5acf93eeef4a8a1b0c4c2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e372296038bc32c6802dbd65d52d5d2ecc7927e934d9f38bfc1e31c238ce6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5dc5f1ccbe684d95be7b61c2bc41566a25de1ba7fa2e92734e6c536a77cc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-putr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243f1f495ef6c16ed71a53f69fe2436d6fc9fdfb61744f3f4bc05c34ab5730cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dufafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a479e63815240271a80504b789191e1048975f96da67a38a844e6a59600aa86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...