MAL-2025-173824 Malicious code in digo-kaimi-liaokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78acd8a91c1347a4d1d96256faa8bf1177edc04624f55e30366ddb56b028d594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174020 Malicious code in diva-tutai-inabuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0db58a24fa918e83391da637640e53f3c073bf14508cfe6be7f27b2d38eca981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175018 Malicious code in irfan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d6a13445cd594b1e23326e1a5501924ad3add334884f42935384c444123be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tubi-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60c7f8182c6ae131b97957328e0d2053411979a491fcb03a9923a34909bfb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175285 Malicious code in kapvino-socvnvi-boffnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ddd3c4b466d5f7dbdd5b81ddde178cd1e70802a4c2b10e7fe4b9ba04722c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705bcd27d44045b5b24ac16331dc988920bd8ecac74dcc53bf6f2ec5db00f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176911 Malicious code in nuragi-sutu-gaviaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6ac6b4b76c922d3a426364e1242b22ba7191fca8b3a077a20457f318debab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-ighfnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98b72ec3c481b593466772941c07dc5fea6bb3d611cd7478e72edcacd19b224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satsgamf-anai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae92928b6f5850c98a4dce7d653309f9a971c032007e38e9d1de14cbca696b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174400 Malicious code in goodafiun-ta-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea949d3dcf49d7b90039d757f2a61ef19763d66e42c87c7473517d84028e4b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175773 Malicious code in kupaio-ukuola-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18796cf15f22d86c6029281cd64d0445b8eeb9e383945fe94998794126453a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4811338c457fbf4d7be6b6406c0073e1de6788d4a404adf731c86cd27405c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19335e55ad193359f11a2043129cf1013902cd082dcae9bd3da8fbfe6c4a2bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172647 Malicious code in aaaaappa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b062405006665b22d457297ee8b2054d9ff6829f4ef20e25e76bb637a5214d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173499 Malicious code in buta-fs0boiuna-gauafiooifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05de303d31f1ba4cfb7fa51d0a20ef63c95773f34967fc32afc4a317547b7def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopanud-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee12ac96b26d4d751895f0088d8eefcaddcf5c3f6344e9934822366b2770b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173246 Malicious code in buis-sunia-nafamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de6d761c346d4f647389bdaf2fb92c7cd8a67582a5df85f3492d3f61dc5242b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177062 Malicious code in nuyar-adamr-adaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1746ea5731f61746b26569dbbb9fd41647debffb4667f636aa631915fc90100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-memeq-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b67f6a4710b5a97b5087f97914cfeb558cf275dd15128d2b54dc53e196bb110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...