MAL-2025-176433 Malicious code in nokire-nakao40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9ec9d9c22f52863f6b652e124fec393102cc5642c64365d9c729667a8eb99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174806 Malicious code in hunim-satmf-anujaafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1964abe872c86f5931a37c7afa143544ac3c7399d511cce706ac6b68351419d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175197 Malicious code in kapvino-socnvi-bosvobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e8f273c11bd934d9b5418bb8709bd877389a89cf9eef99d4a6eaa49a9e3724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfsadsid-ragadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d96edab443821cdd662e5c2eafa648b74cc3513e74503996c3e088f5f8f8281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-iafa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a24cbe56a8bf27d024e635502c10ee8f5eb56efc222300befb08aa70e4ec998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah8-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d360bc2ac726e2cb62dc4cb35596fceb676591535d75a5dfe39ce9356bba16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fsboina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8747d5972956e0a1036ffd3af048c5b148fb9802f3933c263899cfbfc867c7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb35927b1bd1da8e8cf34fc5496d8a96ba04b3498453c5834f5b6ac284142ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8962546f9be37d2ffca2fbae214a78a8abda5301dabb52b8a84621abecd701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudda-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af89bf2b2df254e8459e6d979169ba16e9d6f822e4de90bf08c108d1826f0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kilota-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc914b670346ba47b089389f2e8cffc4765e4ac7256558402b9a2c3a07638c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakafofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00eb70547c548fee38aed00f83212520b58354b7f0726075a1fa1a378699137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vds-yusnista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58334fbbd276685917a121617404bbf6c08cc78321e3e85a57aee26b3a4ac201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dac5ae5af84f9f30e513fd3a75cb85153ddb7d91568c90a232b9516290c8202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farsavamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5a997fac737545a7b134eb051390afef6bb6ccc23ed2f34ed020bedeb3cf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174904 Malicious code in indah-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d902b03aea520e5a6e6cd60b92adde7b1c2d6ac6c6d720f2936cffbbe212e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172663 Malicious code in aaanuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c4857174f2c31fb4465a8e816d2c964c6bd76649126a5de9279b8e9248c53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176129 Malicious code in miftah7-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5bbd1bef1c2e1e063b697905e67712034c2a0f5a2a6e5dd1265fb5fd3b26d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173543 Malicious code in butahu-asfui-dufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c3894b2b7ba91389c3beb35484f4d8a029e339adcca92b922ecbfb731c0f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172962 Malicious code in anidata-hds-mamd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f74a6221e8cd45f15ebf0b1af82626b61b576095bd0f648c76fcb885a089ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...