MAL-2025-172743 Malicious code in ake-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6607364fa5ce8fb528ad99fab7d077e1775774199189b66f59b79bfcf7b265b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179195 Malicious code in traay-tusdy-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21eeb699f2da75626e38b66a8ea8f6f19e037b9e5ae49dd5f7f7fdd58131d855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175110 Malicious code in kapo-samnu-maifmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7a4dcf31359171e26de6e6146f10025667e798523c51e3a9adc21b3ae608e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177250 Malicious code in poglymer-ogaih-gafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fb13575327516c54071e239c2202d7248ce313ef1486454464d32e17e57244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174601 Malicious code in haruni-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f298e0a141a5e570d1983d9ded0e2edea52f5ba0dd36729a53daa24bef7be58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-gafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701d043ed3ab1908a508b2e984cc08c758533ff6dd7e7173b3ac242b09b3711f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80845458c29519f2e5c34b210c97e2e6d4feb95e05b882e0d9faca1dd44ac6fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-putyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964b27e6afbc63705e6904b9db6c7bb04c0c73fbc395584c67995895fdcd74ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6763497b610d4b43d6a4abed8e0b43fd61018d776209c924cf5f2d399a2cc6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-baviva-muavidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8c84a276dc9932acec471f964e60231540c9cbb371426ddbd7cc7be50bee64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugfai-imaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccccd5885d42c1620467e7b9eca1514ecc501023442a94a25d337d54207920d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rofdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255e9e57ad9f5163e39fc332a637a5da0ee62a913737e85932ee52445960a73e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-dufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124deaf8869500e4fd50b16e2968fbe8572b877750e54585e3cc605edb2b6612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaf-radod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66ef4dd964b2bce0572526783a58c4a850d9c4e06f1e86345f41c72f1d509d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aksogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e554eaffdae5c0aa313702159d6c1e3e1b6ade902ca27b0797a6675a432ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fabafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647948615cafcb85f325b7689689eccbe151c9a3ac728dfafb0d1e466a5cf334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c0bbb2a4731602c63c1e0fb3da63ece7c438a18c1d0e405d595b6e04757873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-ravzfgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490ba66ee264bbca5fb1953f53b79f50b8734e874aee6357c546aeca259c53af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6b6dab458b424c38b2faa0e37861b31e11228fa0666a58d8634b3970e81820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutia-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255b6eb7ab840e1d35615bf275d83e08f0f2e8a98c574f84ab22eaaa28555523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...