MAL-2025-173466 Malicious code in buta-fna-fnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ff74a699a3012d9434ec9e64de1d3a8f4c5954c98d07081f0d76e482fce9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-aggsifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94dea6e8d7dd436388ecabbb6d1bc225e5dea8d6ed775bac1074b33e7cf90c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-ihua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209f3ee99e621912d5ee1c7a5f95d41f20b8151511b7def03007c3543ccb121d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-diabatud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40f10c06c5621ce6ee28bf3c1726dd68be399a02c493bd2cef459e5026a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutabi-ivabgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c2294accea5d0d25b68aceefdd5292d4ef380a4d79ea67694608b5a3c69995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178771 Malicious code in tanufahuir-sofai-dugoft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c24e48dc9b9de1b127dc22d2b846c406742c7f43905d7665dbc499185532d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172847 Malicious code in anak-jalanan-mdn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d127e7bd0f6675f98410f6fca6fd66a0e32b8169d021580a0fdd1dd772aca33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178991 Malicious code in tearich-new9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471fcd3d0dc2753c742fc7c24c3bd4bf1e8d5748946da534d55671c77b07ff50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178951 Malicious code in teagod-rs5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908844dac127a69ddf067248915a7b3e5d4659cc1b690b406ce61fa1b8b37672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173119 Malicious code in budi-kont-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e98aba16161e873d6867f050c544f791d91cf8c2556282e5a910dfd9d93037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177971 Malicious code in polymer-gibfaaga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1494ff6c654646f8dfb78ee7c98da5bf180f6563ff3bd2e27bba1a2dee250dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175161 Malicious code in kapvino-soafadi-vnfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077b5b29d44c3c568ec772771a0b980b01fdfa3b261732770ead0c45b8c8b223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178543 Malicious code in sahufarf-satidaf-fabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731600607f5a36db1934e835a78ffe3ba6112383dd8f0fa323f42efcdddb5436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174771 Malicious code in hokage-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29f3f765e01e504250765dd4ebdbbb2905a5f988e497cc5fda8a57b7c0288cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175872 Malicious code in lia-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a12946ebe2c7d8aad665578e9c83da96c7ef11b30ddd66008862eff326a07bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172665 Malicious code in aaasaafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d161dd1adddec82b23068815f0d13abd01228fd84ac65b16af9af5e5cd8ed74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178452 Malicious code in sahu-satmug-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c96d4e25fb5692fd3082ddda4ea57842b8f1ce142c21a0854327c944ebabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173194 Malicious code in buis-masi-butanamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7408c88f8ab500aeced3b53d96a25ea83a9a8a99365e4b63ba4f592322f753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifvgfa-ratavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e39411ed2c758abb3b93fb3174751b8ce4fbf2f192fa78636da5155cd853ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-macoucvova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d66bef4d1dc8f4782c4acbe5756a15051632569eb46245f7862b0fe46f4ee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...