MAL-2025-177271 Malicious code in poglymer-oghh-fiaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c433942f8181f17418e2d91f24b66a4778175b974810cf06c51ce188eb00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172691 Malicious code in abdulll-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d45d859145ae92765f6fe76ce2c2f031e16725ce240045be4fcb33dd7d8653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178657 Malicious code in sgoodain-sanu-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fddb7284d512709633b5e0d0b4dcd48dc066dc0e4fe3359697aa656ce59208b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178384 Malicious code in sahnim-satagi-anjifanga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dbf3ec101c175adb1c3bd4a02780b5a83e42a8fb0e117bd1eac42cc6c6f974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175229 Malicious code in kapvino-socvni-bofafanifvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ca6e56006b02661b6d2837a3cae663749972413e48ceb9289fdff16336707f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cac06d8612ca64fbec5f7cc01f0264b1b132694fcb6c894a5b2628e9475789f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36c599fe418de6716684051d1187650923bade046c85903c7217f80f4338c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173057 Malicious code in annneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1766a954fae5723d94fc5416a3a8848e8abc1c5275bc03cc607e1787d97fe0bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faa-saiaiaagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba0783129b62422049ef09e2f51e870ad46c0232d4338843ec56240d75fce6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufaam-iunatuyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a7ab75f8396f711a2c1745427889f517d6dd8fe3ffa1339fe432e8eb32fd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175858 Malicious code in lia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6c6e0f47925ba9e7f34b02ebfff4b745285f36b3ef8afcefdc5f5c418efce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-bodada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6147bc2049b7df27d5a7507fc062dbebbaa6dddb88df3118c45faab6e59523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8980bbcf4809354a04e381c49586178c190af2b309ec9b1c0e7daab6ebae752a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175593 Malicious code in ksai-kaiso-olai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314fbc894947b10a6e11b73071b1d58885ea784d8056fcb20b296ec7c2ee7089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mnaf-saif-cagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da2d5242420c91172d426a2a89c1eeab26849ae8db96788810fbf6ea1bc082d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174335 Malicious code in goodafin-nui-gibafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cf091520d293d482273dc03d8ad9303072ba4a5f24c23f72f77c5cf321c18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafagigaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e822d887dc22c53485780ac24d442e46d6bd17a74bd9869f72b39d6a07743c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-ukutia-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d758f770c4899e450e681161eac479170e63ce4e756391988871f95eb0a80d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d343cd40b4e595bd395b4c6000c711ab4fd4e7ba8e1155cd3cf7e8aff66367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1602996782dbf58cc9fada840cebb7749160f3ad1dae0ae36ab38beb5c6481eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...