MAL-2025-175773 Malicious code in kupaio-ukuola-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18796cf15f22d86c6029281cd64d0445b8eeb9e383945fe94998794126453a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4811338c457fbf4d7be6b6406c0073e1de6788d4a404adf731c86cd27405c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19335e55ad193359f11a2043129cf1013902cd082dcae9bd3da8fbfe6c4a2bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172647 Malicious code in aaaaappa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b062405006665b22d457297ee8b2054d9ff6829f4ef20e25e76bb637a5214d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173499 Malicious code in buta-fs0boiuna-gauafiooifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05de303d31f1ba4cfb7fa51d0a20ef63c95773f34967fc32afc4a317547b7def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopanud-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee12ac96b26d4d751895f0088d8eefcaddcf5c3f6344e9934822366b2770b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173246 Malicious code in buis-sunia-nafamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de6d761c346d4f647389bdaf2fb92c7cd8a67582a5df85f3492d3f61dc5242b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177062 Malicious code in nuyar-adamr-adaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1746ea5731f61746b26569dbbb9fd41647debffb4667f636aa631915fc90100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-memeq-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b67f6a4710b5a97b5087f97914cfeb558cf275dd15128d2b54dc53e196bb110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-duguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ead9cde4650dca24b2729ff5cadd2a1cf227e5d71c8e987c791e49f0b0b94b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kila-jakaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7b0c65bebfc2a1b553ea17ac566816608348468ce0841d32ba3f753fcfcb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivabau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d626dfdfc54970194d1ba2d3c1c606e327fae606f9e7b84f962eb9b88778fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-rafoasiabsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe81d3785c166eb2b6f2cce1cddd5b2bdce70a0c1163a92462bebaa561248fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afamsahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a460d56eeadfcf33bb79da070b5cc0c440ffd65a173d71fc672d72f324a975d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175094 Malicious code in kapio-samunu-mumad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236860cd6efa3c4254b55e2918ee328ca7b5157801f55fe3b3d9f91053ded4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda083105fa3af4d98d6a998b2d52f6abec68f588a15c7823f8e60d641133406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178008 Malicious code in polymer-iafa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a24cbe56a8bf27d024e635502c10ee8f5eb56efc222300befb08aa70e4ec998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f757203abe245ac4729ba6570953ecc1f5f61157c1258ab983cc42b6ba34e63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175595 Malicious code in ksai-kaiso-olakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64ecb22cde30bc18676bb5e0c890e3b899c827538e625696f7f3da55002f0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177924 Malicious code in polymer-datdfsadsid-ragadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396209bfa9766907ef48d71eaf12efe9664aca34cb2ad845ddce10b4d6c12f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...