MAL-2025-173385 Malicious code in buta-fbna-gafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0898988c003871929f3b0771dd5cadd5340dc602b02746ae97da4b2d116b5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174295 Malicious code in goodaan-ngafsa-nubif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf6b2d59dc159c5774478de9c6324e8b864a41f4e658cacc8e76daf9b18d273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175015 Malicious code in irfan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96223725b029e497496127cece7eda48e22d176511168e0cbc294b69e3ba55d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176673 Malicious code in nuilva-bavaim-madibavavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d307f020336ca9956fd0e60ae30f3e17ad72ab21730e0c33bb9b0d48ba0db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173110 Malicious code in btuis-suinana-mvmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122b889e943a038631c63a3e5a6ee5c9080732e3fe760f7667edf39c82d14199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177660 Malicious code in polymer-afajif-rofifafad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b71392fda21057eafdbdd10a1ff9bbf38366c9c575f495168248fd875e7fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172968 Malicious code in anidata-hopanud-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee12ac96b26d4d751895f0088d8eefcaddcf5c3f6344e9934822366b2770b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179330 Malicious code in unimna-saof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8493ba1ec4fc0872b389012e97cc81a3f2eaac69334e2e8fd4fe4f10bd1acb90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178356 Malicious code in rusdi-set-ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9d43452fb6cce6694246e6d2d998d029e4df6dbe932129c18aa25e57d8893c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-asai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6ab8587c2a1ab7bcab2f591c823642b1793f71c38b82573a1d2105df2b3298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-asia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8f65f2887a0afa780176bf72f7e42f1dbbd50f034464c4140a5baaaffaf52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db6d4c53b7eeec2b4d5ca8286943649f36cb4dcf0d324e9f23edc35fdbcbc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f7c865f8800ed723052e1a26059ea085ae24a586cc007b28b51dfab75a0418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28bda5420387c47431a5d1c01566f7f1cf7d5df0d0d572ae17d8bb9636bb048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0117c413757b9ced51d9aa7d8c61f7c982c2143e6bfbb32a6f78294af4cfb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09176cb5e314a748407172eebee9ff2ce97cf36ee4212a529073fd3ab22268b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892e4848552c41be5bc300d2ad7dc71eeef00e805bb57988d09bdb93cf2f6b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fiffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49ede547620fef7a5e07900efd676e0e66ed0487eae453ae3f8f21b03973b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c0a97e81554d4e9ff9d8cd38d90b09b40f8f2da2e9dd91c43097ab1851901d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35407aa54e601e5927e46f90cd64cd7f3c09f1d9ed36d2957ba8598b120aac94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...