MAL-2025-173515 Malicious code in butah-asfui-duf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb62cccc16d7ef52664f8998caf4b079c72754e5870b15c0fe5a41d6f8ba930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176903 Malicious code in nuragi-sutayu-gaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c623d035ceaa825ce22156391548ae7f1c8742e231ffe1177fc6e458377786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174366 Malicious code in goodafin-nuiya-gifafuatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d813fda2d616895a968df90dfab34acc6212b7b78d3729eba5e137d57556264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172696 Malicious code in abeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb87fe0b1d48cbdf48bb27cb580473b30915548dc90bdf4662768d7ccb33bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174734 Malicious code in hitachi-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43ff9e5bd9e20efa76c4d089ef8a103457872e7ce3de60c10f00bbc577392d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gadafaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca7713613aa9f768a569d954014068f088d951e7c5d21a770aa3fa30ee16d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahih-faigfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3fbb9c43938d0201734d7cf7a926d1ce6a938e7af2385a70b21af49091b421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-macoucvova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d66bef4d1dc8f4782c4acbe5756a15051632569eb46245f7862b0fe46f4ee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifvgfa-ratavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e39411ed2c758abb3b93fb3174751b8ce4fbf2f192fa78636da5155cd853ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e483a78aabe90c57d84e3f3a3d1036165aa803b9db2c00d03b7f63accc209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32375f0896ea92f9aaf6be585cf1983a97276171c33c83c9420d7fc805c06aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-imiaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449516af6444019658b7ecda81755d71c058ddc47e73d6316e10d294dcdfca4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nafuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05d37e73c5a2a7863f6f9f091f7802dba78392704aa0fc0bd7e669a73d7214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresd-tsad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61746685e8d024c9f00821957a191820f8fd7362d648d78096a614e16c5e387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-agjcgfkaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c75f36480b75d748b2c5ea319b4f379bdf93fff06ed7067a85f34598533c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac05a151f319c0fb9f1978fc87b22eaec4b5a5c59ef884f36b4becad00400b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infaruduitag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379a21f979b9f2744e8ac7d2f659de4bc5ae467b6fda1d0fb7fd79f23893b038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-rda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ceeeeea8d1acc600b1b8415045a53474e47f03d17450dde5965ebecc4e1c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofafgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d97dd3fded2fd64dfc3d9f4385fe5714f39d7445d7dfd5d94730ce51afafa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-aniun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3016b52e4fae821ecb06383a9dfbd52985fcd93026e09fc04967e720ffb741bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...