MAL-2025-175756 Malicious code in kupaio-kulaka-jokiohakaasikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd998d55bd6d31420190386cdb78638a50d3afc8d592f33ac165fbc8650534e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174028 Malicious code in diva-tutai-ivabaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3271ede40bb57fce1e1f7ded9f3f850af35722851dfdb266c386a01aaa7b1c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172773 Malicious code in alvino-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5706e90317b82930734016969e099b6a9f008aea0ee927b6722120f1fef47df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173988 Malicious code in diva-tugai-imiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e044740d5cf0fc3791d42eacbbfb6219a98462816a9c2da9acd1ab512d70b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174551 Malicious code in haritono-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ab3c01c478b22b563a0a0873996760e5815abf0924d2d70f2cdc54df2060d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176181 Malicious code in mubafi-suanai-cauabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b255451a41d12a94475f46851b0712a638e209012c5c3b659fd4321656881b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174429 Malicious code in goodai-sunabi-cufgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffee8f13020108d790bbb63b323d515ad7f4370260058cd132ff8ba15f5cb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178443 Malicious code in sahu-satg-igufaaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ab528ee3fccd4c022cd12c8923ad0f1489b06e96112242b8f75b3c245e84e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satf-anuj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8996272e39a33b6e7ca2e5e20fa65707ff04869f3ea2c60dded3b809f24735d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00056646eb491d40a9111c222ba824696906cb467ec5a57e8ea5b476fbfb0ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samvnavu-bidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91bd0d568c84a442846e01dad108d479428ce9beda87684fe89385803d93628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-odgafadgagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c2815bd3f3776febd5522ac795f1fffbf81ad2e729f503c156141609c95444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutafia-daguag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1da35490ec5d986f766ed18589e8740003fe5ea9b1150209b9d9508ce4328c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9f677fa014ad88c2fbeb9adb946d5b0a316d0826e07543ba1352e1b5c54985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-madivnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca251b3954c90db4db5e4f9c62c89c72a321bafe6f432cb22b05df25cbe953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satud-fara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c798a6bb28031a3214feaa1e2d5f41eef49413dba95e7fe3c90d3c050b67f412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-kangtasapa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b798e24b9bee6f7a21a4ca69924eb80bc237bbab3824d825bb0ce3ad472e9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ana-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd632e820837b776208c045812dc3d4830245590cc487e4d1c0f0a79cd865cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24be8edfdd1a7fff1c6b90445c527d14851974b4d87b6d9c3e9f907e1488fbbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d64cd8d303e488245323889521ac54ef9bef6f4868e021d3cde69c76ac2e8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...