MAL-2025-175766 Malicious code in kupaio-kullaa-jijai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1493b12ce0c420ce07edfcf2cea58744dd46ffc6dc58056f4e2f3a6d8a4bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176374 Malicious code in nokire-kushina50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c839310308c94dd9aec8241a25e1a05a711d12095f468b2445d0ca19beff9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176886 Malicious code in nuragi-sutafia-dagutag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed07cab35025d695c5a9f9ce5027654a059b696ad27885753b803509b8d77f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179390 Malicious code in zaskia-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c965fe84cfd3e29f197af31f2d10f44ec4bbc0c9d414e9e8179299283a142ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177370 Malicious code in poglymer-ogihh-gaghaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efe368011f50726b746286b93ed66eabd70876d536f408d71868b1a08b0b43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-bursh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f73e6367a621426c160c3cc0f36a100388661d13ab5ff4a72eeb734c0991ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tmia-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce7244a44dc9cefaf7329ea3211d9ad2b5772960ad243760cce93d4aa206e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafi-ac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4321defa4c65ee9a7aacffb3576a9f313a8994296f2579e3d6256bf2803654e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afasofavbagdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1c700c83bb48279e2e4adebe63e7a63dec51e4930199b41b7191e6894d8e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasiyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c536cbcb048a1abd0e108c12690764d8cc77e882b9cd459a11ffe1794f1a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiaa-nutuyagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e250366ab19dcbe6f3f5572c786adab9eb7f1a6199dcb301a4e6a93c30bdd54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4133c9df6e14d6c9dab9979f03b9fa0f8408b9813572cb44ccff84a2698602d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhghhssabo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5fc7ba39df629d856c61192ca7c1d26c102a458212f454e155ce5ea23e51e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d950a5a3557187bb0d81828abcf926e87d8bde169f915cd0d243476e32402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177504 Malicious code in poglymer-ognbamoah-afiavagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae60ea6f7ff73a6b0bc4857aa0073a192849fb1b1b4d60a323fb4a98afb66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdull-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018c24561b1ca51a3dd115618cbeeefe92c8ca5eacf56af6ac1701c18312623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gighab-agaigada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980450ad9696fbc64a083b6bcb2570a20b30b468f3263d2f0b3a1c616e2040d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174037 Malicious code in divata-tuag-ivga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f027a1ae2df06970ca9d330cc74638b0b2eea150a185547b145995b91c266c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177258 Malicious code in poglymer-oggh-agaiahgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da314d9e4a854bccf4794b8926bd0ee1d15e7b97a0ad515052302eaafd0057cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...