MAL-2025-173185 Malicious code in buis-mas-maaidafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1cc0665901d79991a8dbf77d829d32a55828938f4c0f056bd479350b8a011df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177359 Malicious code in poglymer-ogihh-agsigagsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858d85dd7ed6a6898a0a5c22a495196de10757ed63662a9d3af074f77da8f84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176172 Malicious code in miusan-nabja-biavas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967523ef77f59d41f6192530d9b811e935ee47a6fdebb9f9e3bf10d47a7f73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172744 Malicious code in akee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed02aaf95689b25b2438f0185d8d70dbdb1ffd88a6a7ae8e96e78559c4ee9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-baviva-muvavdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61dd75215365791c6bd92db28efdd37ad87d2350f5fdb4daab001ab3d034291b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172807 Malicious code in alvino-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9feee5a8c7a8a46b968dae43ee1033ee95da28453a4c97005797f55a4e2323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174705 Malicious code in hitachi-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53b7a6be570044878596dc1ec5b6a7bce979ceb11bbb466242d1cd3a2be4035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifa-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45a20b2f64107789e9f66b1631f981322b88d1667a06bc1e7081c5d4a166ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-aaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151540fae243b1504fb8e2aabd49324c1036013e6b1808fe7be0c2f9423297e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765f36d03d623fac50294afe584d31d4437ab350134622a25788905fa4651a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175409 Malicious code in kapvino-soni-favavraia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61ad79fbc01e8c3f050333f4c498becf893502ce8bb75eeb6f7de8d9511192c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-erws-emp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eeb5f2ffd3aa2cb03753fdbf1b68c61c27ba20865304e40744d9b699aeb096f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-geunme-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4175ff7d23afeca515ed08a1a9ab9577760be5d88f9dbaef931636cf2520f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngsafa-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d063e9e98a51ba6d2f1530253712798c7a9d39cb27e1982b03146d45d470775e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-mavmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4cb13756d12d1d9ef8b5f73ee95d9238ec57f44a148a70cccc818a46f6759a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-buts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a3f3ecea7b575016df89996aa7ccbab483a439e0232dc49d6cdbbaa8496643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-auar-baya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e8d5d1bbe699964395ee02be947f2cbac309702284f4756ac79a06eeb575d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-mafad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a894d5f1723b48944ed89897d7e7e4827e40de6a6027d53575cd6342870d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutyu-gaiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bced62d39195f68f9e1c202aff119d52896be8dc97ce497d3682c8e9859662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...