MAL-2025-175005 Malicious code in irfan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cfc5721ebbe173949fb74e161d42d7b2383b99a3fb6b1b0844650c828bff80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-anfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0042a32a086eca6a808257b56144ffe71b2d7b712c2ff60524761708b8c29bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174258 Malicious code in godiu-tumva-diadblu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff36d7b3e4d57508adaa0f200c803d6306f140e5aedf2712a6cf2ac02cd02979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff77e386311a9895a0785973046109b87006a63532da4294120611201526661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hapdits-rs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ea0132e585f8b1ad9465aa02d50cec1f58a7f895af27b98e658c2414554a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172811 Malicious code in amahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d232bc4104f3351d2208f93c20f960768165ced37792621754adfa7180636f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175509 Malicious code in kiki-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a62a35653fccac8187cd1a0c720207f27034b2fc33495067ecbae23e778823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173779 Malicious code in butry-toi-muayt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b31577cbdee6b46a48230a4c3773f279f483d81f8d3039580c47e7e48e2186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54e2c5335d28ff873ef64194f8795881d4d3e268bb9a6bb97a8c04b22021da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177942 Malicious code in polymer-fadid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd202993205829b4fe1cd08c311a9c41e0ba0c60477bbd50b5114b0a7201260e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6ba32ac3c8fe464a522d3445ca4880446624c1c4939350216369579dc01f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659bfec906eb033e041da9f48caa179acb9cba15f6769a96eade486d2445194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfigas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8edd7f5f45bcd64c4d1da7ebdeead714c5daf79bcb07359ba4348d0a083593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f641bb8f73128c2dfd9f035cf57e0385f1bab539570d5b2fb5d6e98dfd86cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-banerudia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d55b18241a5ecbab0f8cd6dba4441c5628ce2055a04ee7c5a09465de1df9778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamair-taqaaibbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a18634152b86c403281e4bae99c37e5e87f97a49358a256ba4ace638998bd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsfigassdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac89d14cc705d9b3a96d4e2bf4d9beae037510422b83af634bb57515cd76b1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafa-nauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e610f5d7b825409816ccd40217932c6ef863ebdede8277a60d403b493440fd46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satasamug-faguo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4100b5e0678d0b1987f601a6172fba8ad5ac17810a9af1ae1bb20eadf36a6eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...