MAL-2025-179138 Malicious code in thambi-yundisk-butd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0536a81fca66fc859594b93b93061dbd5dc4d6e6d84e0beeec7d442d8637d369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172894 Malicious code in aneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d387db97b892a9234ac11b189f10c566d413e1f360cd81cb47cfa1b9f0c284d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177538 Malicious code in poglymer-ogngh-amagigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd74e23142999ab0eb07a694fbed37f22dd333464939a85633ae96aecccd4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175320 Malicious code in kapvino-sofgdi-gagoffagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d34fdc4976978c41d3d54a8dd9f82fd442efc7d17b5ba0eef03dbd779d023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175039 Malicious code in kaka-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f692a2ba0d086783925198c3057ec2a1173b82f423834201d3b559d9564d93cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177938 Malicious code in polymer-erues-biuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f050e3971704f17bfe449dcee518d477bbbdb485b6cb1113b3b5c3bf4aeb1702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174112 Malicious code in divata-tusntabi-ivanau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38097e261963a8659df398b4ad36f42690364b5a093a49befa74432620481e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173102 Malicious code in btuis-suinana-acabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f87b80f6266b90d30c3f5ca198ec5e571516a4845d0cf7dc55d59e0dcfa03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174110 Malicious code in divata-tusintabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72554a33f3e580dadecf1fc1b14ff11a1d79764c3efd1c6d1977cfa6039dd523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176016 Malicious code in miba-dafdfa-naudsrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fabab8345b71c9fd60e5e120cd50d2d44d28a0f576ee7f947b409d6dbea373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174557 Malicious code in haritono-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8754a8cf18e9099363cee7dacf74bfc68befb4da3a19c6d14b949db4a95e9e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179340 Malicious code in unimna-satgob-naigsubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d9a31e590bd1d07e5d1782881075d77ce8f0aaa9a84be9d21e31c4f795bbe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175662 Malicious code in kuku-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89df4a4c0f884bac52cda110a7e5f5f96812686c8a5b6fe777cbb92280c38c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173876 Malicious code in diva-banbo-imanumaabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7943c03edb46d636ac1c363ebf072193e3b88ad08ef811a56e712a2e7a51084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bsoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66c31e82cb4d4996b61fb7837307e555ab32197c7ea418dae90afafa92fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnna-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0acd5a3bd09164db4bbb9c3dccec279d60bbfdcd2aa24d7e43dbba906ea46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-muabaac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da87a4fe02c3a05adb4b38e61ba1faf99064c55e0d8dcc2c17dd54e611d400c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175548 Malicious code in koko-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bd46c11d25c853b8baea11a092b7037039b0f0da2efa84d5adf58a43ceea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-gfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bf24822c59bc525d9f38f79dcd128b5105e46105578d3acea4f3e111a4a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olailio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eaf2c3d4a211b3858b2b5c161e81145f1eeb9ba5bc89bf05c3244a7d11a32b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...