MAL-2025-177431 Malicious code in poglymer-ogminmh-aafja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74b91a76cda3d5d0c34d8058c602c44694df8c4cd7a3aca36da5e9b5b75b7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176868 Malicious code in nuilva-vmiam-ravfoasiabsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d2ce4a29167b66d4af6e5ab87f2029d066f01b70febebe49c386ad8df731c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173869 Malicious code in diva-banbfo-imunggsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7876c6dfc2346864cc4b870db1615de7db7fbafe629cf5da7b22712b2b01b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176840 Malicious code in nuilva-dare-agajafgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fce351e723f6d54497c75f2d381d8f706e397606c6b589feab1beb53aab9f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174217 Malicious code in goditu-tmia-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce7244a44dc9cefaf7329ea3211d9ad2b5772960ad243760cce93d4aa206e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiohakaasikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52295ae651f1897dc3e66e922f0dc9b3b6940aed24052f266724ef6842b6281c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vainafdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 879b0794ec112ab58dc7f21b099b291086abbe87af6b81dce02ac9aa1ba9dd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajif-roiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce6e6c800add7a8a86b4183a48902af3e6c6b02de21e21509a2ceecefec42f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sat-ananin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d163bbb309bc6a2c6f61bb7096972f788de09d9c49827d454ff924ebede607ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384852132e994a82ea5157fb0525dddb06a7b2209d98c482c04cdeea62295f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipofa-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e580bfeab2969787c084e24d772564cd43fe5e104df3114b26ed88633629d674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576d1fb3d15ee5e76ccbd4f024a4e8d1fb1de29f2f5011abcc1b440a804a5405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173988 Malicious code in diva-tugai-imiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e044740d5cf0fc3791d42eacbbfb6219a98462816a9c2da9acd1ab512d70b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178256 Malicious code in rintono-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6f1c7584a2ad61d9b91005040038398a5b8137a04f96157fa3459be783529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178747 Malicious code in tanabufir-softafai-dubuatgia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd07da888650c7831e4086a1de5ccdf1a3153a59b6ad2a855c1e3160b73a3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunu-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71367344ba08c7ae3088405ef9e9fec38e3deb322693fba13f7ca31f7281872c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutafi-dagua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee82bb16bd1f2ca6b41b703ef45ab9915891bec6d39f181dd5313f976797b99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-bodada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6147bc2049b7df27d5a7507fc062dbebbaa6dddb88df3118c45faab6e59523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akkku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a202d93fea7d5321d8de6241394701d737576f7931e60c977862a12e502129f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafi-davataihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a1f9eb0183cd139fef82e2b30567149bd931edb524a73bd7a6624db7e6a1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...