MAL-2025-176304 Malicious code in nokire-kaguya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892e4848552c41be5bc300d2ad7dc71eeef00e805bb57988d09bdb93cf2f6b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-ngsa-tufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a10c445363302878d658e3883f83384763b4fa8ec40838489066415fbb5233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e3eff0ff0d928ae84248e83783c99472f4b4d413fed65bbd55412fb5f59e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-ivga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f027a1ae2df06970ca9d330cc74638b0b2eea150a185547b145995b91c266c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06233e86c8c52f4eb5a372494970cc1f3ca1f938c0f55f141efe8240dd8231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufufaa-inuutya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc55dc0553b0592f9b85bf1ea809c70a7cf87a7905742c18a8b3c3c081028f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-liaokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78acd8a91c1347a4d1d96256faa8bf1177edc04624f55e30366ddb56b028d594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-sat-fadaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac12c6a55265ea446410aa31eb896ced1f8f2188f9cbce4ccfd1074356a60a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e68766097a1361697be6d5fbc2c13a71b7a79845abe17e395e6bdd164d20bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174100 Malicious code in divata-tusintabi-ivaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0e5339e10c254e55ba798b286b55479429f8af156e7ba897fa0212d7f3d621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diharuray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb7f0d470482cbf516f37987222d7f2cb4aa32a2607f1b48234240686a6a50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178438 Malicious code in sahu-satg-faniuaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44dd20e339754cec1b2b3cd65d4b0e14abdbe26e8d082d88bb417409a1643b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ten-teh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f4cb58fac5cdc657b07ea20dd13edd22f01143cd324632fafae9a893d49072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac92ec444ce853ac43b0f1dff29daed80c6d20c5316b20095300cfaa8b140fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649af86e80276ebd2d5ddadbc4f5eb352d1fe2a3aa0cc8f8bffec594e4a1fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84ebf3760efd3b0282a2ac03639d84b45d18c3044348d3e33d7c390746b997b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177426 Malicious code in poglymer-ogminamh-abafbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba9bfecb22c8751e9d3333414f9d535e3e9675e80b3fca739684550de1c5cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imunasggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68962eab62aac258bf168456be1f64f7fcaf56d6c7620aed2ba3035ae1abeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173117 Malicious code in budi-ko-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivanau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c56fb940b34e28e52187be363ba3852cdb5d01f5a8fd246b911bf97b52777e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...