MAL-2025-175953 Malicious code in mahniya-suatayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34119905957fc0116567c47ff6aae9d27b34b84760afd803d65c47beb5cbd6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174494 Malicious code in goodain-sangunu-nutaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f8e83f3286edaec5d8d809e59fca500f803103281ce4b09d5d3124a06b1eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178518 Malicious code in sahuar-satidfaf-fbafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7742acb3e8039ab5f4ddb648fb7c77cbcab8803c83d78d45ddb2d44bc5e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176092 Malicious code in miftah-mipta18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e4f1fd8d2cfcfdf2e9d9984f8419bc57a6d4d9059bb5e5ee8b3e3481d0acea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172815 Malicious code in anaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e375a6cc1c691eda756cfaa7bec9ebef227baf4f0ed3034ca791e5983f00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173607 Malicious code in butanaih-afsfafi-dafififif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67ffb3806641d1e585fbdd84e188372bf9b4cfc1910e1ed6a222a8a2922f851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178319 Malicious code in riya-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb9852bfe582a1f407040f3c2a668d59253891e7562040f72327916abda1a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matila-unud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab53d5e845dcffe030f200ec1697a7117bca926e29b481392c70f82d94682a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-podr-guled (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d118c9678b53d5b69d584ea15f36fe98497b0e3be79b7387c59dfe365ee40b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172310 Malicious code in augis-pomoi9r-nsusdsfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ed5ca115f68aa008e2639d9b47628b8392d8c2e465573b774a5447245658d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-lead-manda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb2012f86292b108cc8eae05f0f37eafd4e961947b4c8db1a5dc834efbf468e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-maia-ub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c92fcbcc07cb6f98e292425853a4a3398ac4fbec24366e8d65d2ab555b16a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172093 Malicious code in apasih-ledong-pok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd597209da4c8178049cc92f28e2dd80ff3120c1f3cead47d98d4e741ea6a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gppkri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b1a45767b8e73d32c9db8e6c436b8509f70170f9caa5085d11691d479f8b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bilalcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d4e0601c5402291ea8dd71971b55e73530aabc636f6f36f0330599b0eacb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ciaracollins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903b407ea4e3b2f8f9423e41e58d93d48e1287a5ff9fcf1f3e60a400fe5740ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152250 Malicious code in alfiansyah-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2732448e560f359b939fe3a0e92a8cfdb789332930b2fff02eb026238d81e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7994bf8b032abe55b873e0bdd54e9aacb02c855cb4bf62cc20cb3f8d25737c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dinabusab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd2789aa4ad99b74c9b51994010946b16173d99bc9ca76c09824db408e3d4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcaa4b5438d26c69de4057260e4bc92dbd95c9ef607045fd0bab4aa438beb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...