MAL-2025-178180 Malicious code in rindaman-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df2451a632052d8124ccc413ebb8abb891675e8ba0741bca340d95294f915aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174003 Malicious code in diva-tugfai-imagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610e2e46c62b65c0822b9456cbc14017dd503f4ae6de4fbbf0cbfc95ec0029b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174964 Malicious code in ira-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98296435353274ec1fee7ca1a24dd1ffed73ee4cb0a7b32f3f07911c7c917a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460468fac129db9229268e992ae5e7da102404bc1d5a4f3b5b8bd7e25b0078cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogofiggagadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299d6f783b229763a6e31ab21876084f4895624396cd8371683e20ebc92ecb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-misalani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc9e96078e475c7fba654d8071af3a8b0e66a9f6e35d9b1d5a6f0e6a1b7a0b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0efe706012f672bb413ad0cbc12cdf9cd3fcce1c5873291f7e8c537882cdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imiugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16952187123f9901c39672bab4d127c0283bd6349301937933e319c1ae4e86ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-butys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e12a25594a1abd9722dbf96d2e93cb834e8a579eccfe48b1dc075bf6037d2541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minds-minst-vusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ec720a815a6d199b32826accfd7a1addfd7bfc140c480606584311cdcde954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a0515e95635582049950f9e033463edc064f5aa5311e84d63a69020d089b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-ngoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9c2c9eaef071397eb7398cb7948cdaeeb9234994c72e99eb1426a246a3787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-mad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456bda0957d157d1f9b309147adfe21d4a56a03200b7af68150b152e92478a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somagogamoi-gfahagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63a49409ae73ead18dc88b861195b8477279b7706e2c089f1222bec8dd121bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fiuofoana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc5a522ed3f893f1ba1a14de88b037adccd6f8b1f10659f4c8432a77e00bf91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cdd633d6dbd4a5e7ad0785d92c538f6e0589fef7905c7a5b255a3c1db455d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softfai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e2572a53ebf2a4c5b3929342238794811cf1154b8c26c5761559df2efe0d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174409 Malicious code in goodafiun-tufa-fudgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82a0f1c6abf16dc8d27c6634da88009d6c5ff5e3d9276f846f7f7e386e5f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175830 Malicious code in lia-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce3383fcea2544f6aa96bc5e5b40036a35fed5b38e406dbc05bd01c549c68b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173651 Malicious code in butanaih-asfi-dauffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd6293277c9188ac41ce871e99a747ad8a96b42ee1b8d3ea973fdb674746b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...