MAL-2025-173744 Malicious code in butry-muipo-tuio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94baa7e30e256aa248a2c8140afd2c79dbbe307f624649df9effea194242482d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173081 Malicious code in bafai-sunabbui-cufuamigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e9b44a02516394a19f505a1459080055e450b76bdf20240c3f31afdbdb49e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173740 Malicious code in butray-mutio-uytnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18234247a30047608fd971e3f0052c554c69caea78b99627bccd28e5d932638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175425 Malicious code in kapvino-soni-fuvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9501c7840043a1ec0b6767a3808894d1d57e52ad81d8c0b923934dc926d166f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178484 Malicious code in sahu-sautug-infaruduitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84539130327d1694b32d6ec408ae3a825a204921b29c6c022283658e8e0bc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174633 Malicious code in hitachi-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb8086d6af88e3eadc51114038dd5d2c004a6094ccaafb582c07a54259eecb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178489 Malicious code in sahu-sautuga-infaruduitag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379a21f979b9f2744e8ac7d2f659de4bc5ae467b6fda1d0fb7fd79f23893b038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178807 Malicious code in tanura-sui-dufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762c40594f98870f1b08e76557c4edf56f40c9b7ef76762ad7b4064c67f13fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-sety-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86c405e1cc8b564c49d698267e4cca764c03292b0d51f54474da000874ae6d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiga-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c3216577b1da11b14e07862e575fee0e26b09ab552043d42af9229d737f6e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaaopoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb32c2ee2a0511029a6da620c987ff58dc5f45dee0d16a04d22434f5c44b37e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06afb2570282a837ebb6664e95ac05a6ee8de9c3698a342d4bb558f0aebdbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946159206537547f91546e54893d67600e02d59a2eae838c27f35c7484faf3cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabamia-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7518ad3b4484a99ac6517615fbfb704c4ae9b72d585f8291f522a8f6aa969ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-ditota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162de5cec6d6443d3422a41f21b1e8d7bd016b873b485c9ae5d90e5e51ba8793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasg-fgvanda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5171c7069219d84ccde02b9179eb27d6e61d89c70f91f6c106ad542e0ce356f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabmu-iutubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0283f51a20aa88324cd4e9b3c669992c477da10428ea108bb4ec5f9b73c87da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4d88a7c078d1e9ac66e29e62bf1a377156ece693790db17718d5599a05fa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173638 Malicious code in butanaih-asfafi-dafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a053e4c2408d5158a51334417e8aeb41698e2ea5ee6e5bd1b2d730279dad16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174416 Malicious code in goodafiun-tufa-iniatid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668ab01059786e07a60a162cf0faabed16a8c72465cce2241f69ebe6ff3de0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...