MAL-2025-175115 Malicious code in kapo-samnu-mimva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b5e99ca0f1ee9f297fd86e4c181b2ad755d1791d174d665620265103ef9be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173978 Malicious code in diva-tugafai-imagivaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57f16598f2ea83db7e34ad5d69aaa5e9850f829a058c4b5b6dbf9ff767deee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174551 Malicious code in haritono-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ab3c01c478b22b563a0a0873996760e5815abf0924d2d70f2cdc54df2060d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173892 Malicious code in diva-bani-imbufamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229bcab19620ec8e2824fc358644ae73f12b504b93acbcc880ca01b7cadaa440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178256 Malicious code in rintono-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6f1c7584a2ad61d9b91005040038398a5b8137a04f96157fa3459be783529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175149 Malicious code in kapvino-soadffi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb2f17b38d69b92f902e7e738f4dc2183646f5f50e90260369b53ebc0b7ff4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173198 Malicious code in buis-masi-buyta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d1778ca31b506eb1e72e0d827552bf392c992b8637c83bd7ad53664abb9466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176021 Malicious code in miba-minas-midnas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b1ad6bdbcdca5aa741a078ba047394ed4e96a0f5524a26c5fe539db7933643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bai-imbufabaamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a52582671a9ab9de6b44170674f96ea61cb98f8446a49d8d509eabcf0fcaa60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuuur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05673a8df673bb19d5454826b918db1b16efc542fa2caaf8a45162219406c63d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kais-ajiobolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749349c569c565547a4c3142eb8cbbcf1f5dee11e09c4a9a2329cfbb0c263357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiohakaikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dc097aff1e3041c00433fcc41e359b8aa6641e9532d43f01083d33a9740f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mun-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7c2e2a35072a47de10958e7361ba0cf0a9adcc071cc60e122501de9ac905be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174104 Malicious code in divata-tusintabi-ivanaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b980f39d5075cfa7de3ec8c3a1b2fb5bc79d1a4755ff9823e9f01e1685aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176617 Malicious code in nuilva-avmim-ravosovia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d831d564a3726be0218d768cba30dd69cda3c283ddf6d4743f8f5f7cc8121d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172888 Malicious code in ananda-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8356e4522089c228f6b85138e9452a2919bb0e64d35c838d7bd7dc7a42a04c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifafuatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d813fda2d616895a968df90dfab34acc6212b7b78d3729eba5e137d57556264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putraad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def70595453667f13b8778ed51c73baec38dbcbaf7c360d0fc94ecdbd810acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc73eec9c506b9aa0ff35e129cc0a2d92be5add5397966b1a60c033ef3567de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...