MAL-2025-177431 Malicious code in poglymer-ogminmh-aafja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74b91a76cda3d5d0c34d8058c602c44694df8c4cd7a3aca36da5e9b5b75b7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175413 Malicious code in kapvino-soni-favri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7d083549be6eb45b4c45e510ab1af4dad1a61a587e762dcad23d9b01f58347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173885 Malicious code in diva-banbo-imunsgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb41f66e0c0c1a0fe722ae4ce7324b9d57be1ec79d9d88b8b05f0ce2e84d0791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-daufida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d6acccca3a3f5414f405dc301c5b2efa798031ee88d6e511c7f51049581de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174264 Malicious code in godiva-tumavai-dninu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb87e09c4b6db3a93f2065178b51515dd786695d1705d4c644a09868b6a7bf77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipofa-ihauah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ecc27de9700059fe6ef87bf6416f8507f56a2c5c46cb4d54bd09f9abaf4ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178973 Malicious code in tearich-good2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9985e099c694c26950e215662b746895a751955bd13afe4457ae0d25c1339b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173213 Malicious code in buis-masi-madira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab10f569c102a3aefa896a0ab21070cf452e029a8110f82f00cb3fbb0b7a2d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-est (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3140f9d6b34ec291542ddf7d4d3f4abc6cf25b4e6cdd3e404749a3c4e32f32d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179208 Malicious code in tray-iutup-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951e22bb423fec98be2560c57e2d0e969db550395c76df4a961e8babcbf54538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174411 Malicious code in goodafiun-tufa-ii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f06f1dd94e3bad1305da80997353187a74fb6ac7f7d1b4a8428745a87ed5585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178219 Malicious code in rindaman-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe7691a954a6558a962417b8a1af03a371b0ed459df096ae772d2e46af9b8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-kangtasa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b5328272478ff28ad5d00b08a6f29385717f7daaf6317fb2f7f15696b73f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172650 Malicious code in aaaaapppppa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febf226ba6dc67fadc55ba26914229e47d7291402da827f8c3aa08f9424788d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-madir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313e6f728546f9fc980c5b82a5e1fa89494edfd0b675e96d6182faf007641bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173027 Malicious code in anita-haladodi-misaladania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3119a441cd53632bb0a85afb0e345a1d8d0cada17bdbed270df3420c5f88905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175499 Malicious code in kiki-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd84fa28d50d18c63823851105a218a2040cfe47351337740bba6a81505fbdfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178400 Malicious code in sahnim-sati-adagoia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dbe1b0087a1eb8931eb7ecef508563fb34d988c9f7032f7ce65da67e0b774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176826 Malicious code in nuilva-darde-ogoaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50692a6c0d7b9a25a1496dc4bebd8141f31476ea6aeea1ce729af3a6b97d93a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64c00ff17531f341b0b3d7ad1d6def194155416e30d93ee6ecf3bbd4fa7bc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...