MAL-2025-178710 Malicious code in sumpel-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306a50322bb4a61c19b928ee520717c94a2634b2fd74a5a2d13b0220bdfb7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173009 Malicious code in anita-butaur-masuidagfidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3f9ae250e96b5684b0c5f85e7e69a614b8352e8e77fe0f952b9e6eefd1344e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175405 Malicious code in kapvino-soni-farvaadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86366d72de6ebaa4a92b4319462478b109cc931b839b572d7aab3402399767d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175980 Malicious code in manyerar-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3c7285c98a3ff9518004dafd5aa97a8c901b334909520bd2e078f298169da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in truay-opzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6dfd5ebbf1e8d7baa1b425096fa9fd943b4df5bfd89f50e3e3acf7a5debfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akkkkke-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697a4c67abd318b39a41e391f0a5ec1ffcf92e2ed9dd76115fd294e1a22ca9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f563b0bd7e5b0799a16fcc7a7ff62fc087398919af8ec2e9c1c488cc143dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-miadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e6c5d63a82132e22ae5c6c40a34f4271940b1c8fab3bc61fa431d72b4f430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9556dfbaa63c23abad36ae8bab4b2c7a28cf0dfe2e06ec78328eb9c497c02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsfigassdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac89d14cc705d9b3a96d4e2bf4d9beae037510422b83af634bb57515cd76b1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5495b7ff37f9c6127675f8b50cec2bcf5d5d4e5d9b9104673d9bfb7065f7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb84d963dd4ea50bc4f5e62ac6655216bc281b80344befd0dc75d32826602e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdsdsgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675799f61d609705152a43cb587e2cd57f44577cb61d45b57a34f403791794d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526b9edb8a6f39933056ef71b31f98a6aeb32bfd515c07a6f0502c896cd9ef4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d103a8a8262ce3e67e51bf2a834d3fa7f1d6fea598460efdcace1bec01a52ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-racing2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b8094e5ba133b10858afe5e1c122a4ff2e082d992c443d39c1c75cf159101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanuria-saafaufai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085603e146d4747edefab5c9ff6c28dfd813534e397af7b4a0a55690035e1f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cdd633d6dbd4a5e7ad0785d92c538f6e0589fef7905c7a5b255a3c1db455d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62718657419bb99589be89ded17adc70b8d8539dc05356c91301fd0bd44d9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...