MAL-2025-177308 Malicious code in poglymer-ogih-afimaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e10fe947e70ae93f9a6a36b7b80085e8bd8f2ffc4813b9dd7a09721cbe33a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-erdsa-niuyda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d558f72c70f60ce3ee53859852863335a7079041740000fb18763e7655414b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173159 Malicious code in buis-manis-maif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2d2438048ab62c5b7eade335ab23069ecdaa9834e795d03efe926a2f499dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172700 Malicious code in abehhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae85fd0c1e0547c23d771e514bc05b228a4a03a551f842bc850501ae77d1bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179255 Malicious code in truay-ozp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e018f51970bb76975eb904d67dee42b5f5cdf36b45878bc1f9a73e185604e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c96cfb1f54d9fac8dd3e500f0561acf3fde384450fed86282c94a26514e893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175010 Malicious code in irfan-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6979e1b591710d37f9a9a2859cabb5f54969f194fb2d0364acfac1696fbb036f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178507 Malicious code in sahuar-satidaf-fagub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44958e3dd2863021c62d53b7d8ff7050223475bd1e2baa27f39efb160645b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173841 Malicious code in digo-kaisoim-olosdsika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45e114c99439df14599d172bb600924c654b5a20294bcc71f77a2b7600ac5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175475 Malicious code in keke-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da583ff4b5215c35e9e96d459eed77970a2a64240e6d003cc327af4bf46ff154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-budia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd87659aae85972341554da7f0c7cc8c2824366ca79141ca0e5a76e1922b657f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e782a1a27764ffbdcb682fe3c7f6ec286f6083eacd5609220b50a5823b99623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiynu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5dc1532305cc3bd5a911097f80c19cefe55df0dabe9aad8e3b62b155c6ea2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178415 Malicious code in sahnim-sati-fadaago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2de05fbe53d52c5e3fdcad79477efb52bdf1987fd028e8424ca0d0a174504cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-ailo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653ba8de01c8055a71a6133f43a89f0038c26b4bf8b5a17c47a71824dc3c317d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugufat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685a83ca8118d2d11d566ccf24914c9f2a48bf4102c97c3344fdbcc7a1d4af2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavhof-rafgavzfgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454d43aa7e620fef75ef5dfd2e019666f81fee2e3a0f0709869b049932f4a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179404 Malicious code in zaskia-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11e9575f662a4170d9eba55f7d6a16156a4aa83a8ad4423907fe82ec6a7fbaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-darafaoanusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e4557772df85c8b5bf697fc891693ec8211af7fe471ab70bb4d436e60a938e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-daufida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d6acccca3a3f5414f405dc301c5b2efa798031ee88d6e511c7f51049581de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...