MAL-2025-176965 Malicious code in nurrrr-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c910c23410ab98eb08baf536dbb1c692bca60af7c501c879d4b8115231ba244f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-viva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42551ae90a020be9a6a9c7920242cf72af0957b52329ffce498700d243503d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiynu-gofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bd4395a191f8b90b430704ecdcbd5360548b34e5786254a70f489141944817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173649 Malicious code in butanaih-asfi-darufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 366203ff9d47e87960d279ed61d90f9478bf34a6afc43f270a3615bfd10f477f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175956 Malicious code in manadsi-sadamuda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d201c468a753fbc959ab49f6b2eb97755ae6ca93b4560e05eea0344df241e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f99206a2ed5a38a289a86b3980c49d9ab9e9d38e42e593f22c6a0da17d690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanur-sa-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b871f0078a96c58ba1448967d257c97a2d2869066bbaee88ea0e2a333ee5f943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-npusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494c8cd2b5fcef80e56ca888bdeb87e756fc05425470ffffc14d264657a7ae8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-freet-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859998978d6a37295d001b71f95fc74bf35a325ea01c450b9288db921ad5c58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83cdc475141634e21d6c516121a482c79b575f33e99008dc7ca92bd6114bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e66ece5d73665bbb0ae4ba9c15628013659728b5357e9e646f6bef459cfc89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55acd2e13084fb12a32b4c456cd664630db57f5088783648ce9018f0d3dafba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b610aeaaaecdb2be1f2632a37843d76e245fd534bf2c9d309886c2f99fa9a9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176492 Malicious code in nokire-nakaocil8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48729b8b6961ca6aedad9a3a75baf1e4b108397765ec04ac460b0814fd0b643f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172682 Malicious code in abbbdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73644015542b56e36bf5fa0df66eafebf2097c01f24a88f17d811a64badf7f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175757 Malicious code in kupaio-kulaka-jokiohakasikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741f86959fb421e9ca8e53caa9dcc06dfd984674c27f5b5b0fc428d3299a2c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafbai-imbua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ae59b64bb24073cf7a8a621915dd9c9650a8134f59e543381abc0d0d7972f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177001 Malicious code in nuuuuur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce6e4ab340f9e982d90615ec3ed231397388aa6cde343862e90a3ff92e5dd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa9f48421c4eec67b22b732ece1ea5af0a336ae90bbdc52a3c3f46d6a9e87d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...