MAL-2025-175593 Malicious code in ksai-kaiso-olai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314fbc894947b10a6e11b73071b1d58885ea784d8056fcb20b296ec7c2ee7089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mnaf-saif-cagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da2d5242420c91172d426a2a89c1eeab26849ae8db96788810fbf6ea1bc082d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174335 Malicious code in goodafin-nui-gibafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cf091520d293d482273dc03d8ad9303072ba4a5f24c23f72f77c5cf321c18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafagigaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e822d887dc22c53485780ac24d442e46d6bd17a74bd9869f72b39d6a07743c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-ukutia-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d758f770c4899e450e681161eac479170e63ce4e756391988871f95eb0a80d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d343cd40b4e595bd395b4c6000c711ab4fd4e7ba8e1155cd3cf7e8aff66367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178205 Malicious code in rindaman-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57519de18ebde216bd12ef5ed4aaf84b0fb1f050ae2138a844796c079f047ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-paifasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdbd55384ae6e6b470598ed81a682f1164c843940fb05f19c060aacd7cfb3b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-meme-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed9bbe06fda5b87c198d25165e38422f8e129dc119cb9568377b8c50ce6ca87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3d36f446733ffbebd2c29cf7a505493b4f1ec943dd2eea1546a74a7a3045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58481df28b83f91fbfe865c6b3140f69727a08b5316b32b2e53b87e67f40925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopud-mavida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0073100a42c5f983c7ff04251ce683d01e21a666e27df7dacfa7de05e4d4c907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-sathu-angifafafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94aa0ced1b892ee55a491ddf9d97a4f1db1331eba3f3067181423e73a7d53814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-utudru-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853ac4f853d38287e282ea9cf3c5a7ff174f9e7f45d3c2d72b6c694a3fcf9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahniya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda76c79684de1de9f66961deaa28fccd1b1df3e15624fc50017c768ac64490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed48c3ef8a885cfdc4e960450bd5178da1c6953354ab0f1123a119f9b99dac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aabdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfd5bfdf2465e45ce6345ed0d088a07bf0f303df2b92f10ffbc11fb9d8723f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172741 Malicious code in ahunim-satf-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effc96829195e72cb0965bef60ae534ce9eb779d8b3775d3caa276730c11fe45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-darafaoanusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e4557772df85c8b5bf697fc891693ec8211af7fe471ab70bb4d436e60a938e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189d72ea6b61e87dbdf7e2a2ffcd8d88ec984dc0c7c6b853d6bb4fb17afec4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...