MAL-2025-172993 Malicious code in anidta-hauli-madl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f010788a51fa48e8403aab91487d2d75de720d36e6e1d622eb02808e3dd04bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176535 Malicious code in nokire-tanjiro46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf028eb34b187117115078a3c7b66b7dce9e09f1325ff62660d1a86dcd2a4b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca2ee2335f26294114a8a1378d6d8ea5cbe8d480273c9cd6f558d1ed200d7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufanif-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecad32ec7051dd4e420484aacf07e23ee54163cdab4b6b32b35b27ced381892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4fd211ac86f93a3a4281ccca9d6db0875eaf394228052c1f4b99427affe83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafasi-vaindas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17be7a9513639764637612032ace81fed15fb67e7ac47a2f738efb4ef0878e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rsian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72269c2cefa6ec531930fa235061b4965d76483a53b35a1fb8faffa38e04ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hads-mamadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12eadb475342f41cebc9f80fb6f485547fd714e47b4525b1b54fe187120350e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b0d80fe37fb5caf4ad0d843bde023a31eebc5fada943f9b8e6632500941651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ab923b865abe2854e570f126efbc49e1d118cca2fd8f4ac959582f94d32591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174044 Malicious code in divata-tubi-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60c7f8182c6ae131b97957328e0d2053411979a491fcb03a9923a34909bfb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177717 Malicious code in polymer-afifa-gomaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843243afccd0d8407e95549f2fda1212ecc4275ca1527a1f19a79a34914dffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178365 Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avafifa-fagsabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b9c7eda63f5f6a1bad3872e11d23d8b067eaae0dd6a4a3f89aceba8e498c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9695a9bfb1b43d0d4aa875be6e81d445b1f25c3c2b436d1109b54fda1198bc46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a55c742066d674693fac46ce718483fa9f4c3578c07fa0cf800bc89d5ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-aofdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87fd85494211a0d564f991a53d75ccdcd609c2f6f4e0e3ce1fb419b2cfb358c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178157 Malicious code in polymera-buyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec4cf557d0930950062ac93e740c4f5b437c8def38e60681a0baeb93205161f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173429 Malicious code in buta-fipajapanoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8dcb7dc295e81c2d67d1d4bcc798f9ffdebbbe56c507e2b8cbb6e67cb4a73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172668 Malicious code in aafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeba19459dfa0b9ada52fa4acabb7bd0a3268c5c3ae1a45830fb93b79118329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...