MAL-2025-174087 Malicious code in divata-tugai-imibafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dae3f73bfab21d3e4b0d873ec6c72e1ebc8a5b3f6f03a4b2bff865e8c84087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-acabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f87b80f6266b90d30c3f5ca198ec5e571516a4845d0cf7dc55d59e0dcfa03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179328 Malicious code in unimna-sai-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bd9f93de9d85eed34bb80d55949e13b7fb48046c641aba5e2daa1ab951cc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-in08fdrtfdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f41e1c59d8b488644bd1db6911fc323c180d6821a2b3aa0e5134db2172c78fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffcd770b59aa0ff68b5235337d3724c4ddb2a831ce0ec8636af796be99b582c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173847 Malicious code in digo-kaisoim-oloska (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4247d9ca7b4271fa582b7117b3f488c5be03ac6fd1aafb384c7262d5abce367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonnf-aba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21a5fcf9eec3f462466a980e02d24d8d6021ff90d1e3d9066acf7e18871494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-asaq1saf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e7eb35a484f82a4005d0fdbed8665186ad7b705618145988479ef8a1cc437d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gdda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e19e3569e5340ae38d51cbe7a40d43991487dd31b4a436b3f6f357be36eaaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176965 Malicious code in nurrrr-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c910c23410ab98eb08baf536dbb1c692bca60af7c501c879d4b8115231ba244f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiynu-gofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bd4395a191f8b90b430704ecdcbd5360548b34e5786254a70f489141944817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175956 Malicious code in manadsi-sadamuda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d201c468a753fbc959ab49f6b2eb97755ae6ca93b4560e05eea0344df241e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f99206a2ed5a38a289a86b3980c49d9ab9e9d38e42e593f22c6a0da17d690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanur-sa-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b871f0078a96c58ba1448967d257c97a2d2869066bbaee88ea0e2a333ee5f943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-freet-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859998978d6a37295d001b71f95fc74bf35a325ea01c450b9288db921ad5c58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83cdc475141634e21d6c516121a482c79b575f33e99008dc7ca92bd6114bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e66ece5d73665bbb0ae4ba9c15628013659728b5357e9e646f6bef459cfc89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55acd2e13084fb12a32b4c456cd664630db57f5088783648ce9018f0d3dafba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b610aeaaaecdb2be1f2632a37843d76e245fd534bf2c9d309886c2f99fa9a9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...