MAL-2025-179820 Malicious code in lookingan-jaja42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957371dbc7bdd5b6a809bc5674dabf4ad3673965c85a4d70a8bec9261d8aa384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180697 Malicious code in teate-thy-sonic-miko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6515f0a2fc88fdd56bee40f1e5a92a41eecc99b83ce8b8fb0cd3a8d3c45b7a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satud-favafra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7772ea200586dd8e127a349446bfd2313638db11d6d7682835746cfed97dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratofafofavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f76e1354b865b6a543e45be05e870c9403296a34ced93b4421863f77f9bb546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2aeb9c347f1823c0009db9479095b78c3acd4a8a9ed4c76b4135291d739b77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7effee8d7eaca18565d306c0d5a2095348950d3d08f72599f110697c04c42fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisoim-olosdsdsdgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067de673c58e47f7d111be7d02707b487948fa1ede58775b40f630705908a11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgob-naigubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe67475633b1367286c13d5b40429a37099f0394792157dfaa074e5497047c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-agha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39aee204910f1127dcb690e6188c7738a8fcb77a6cb3e66a2916f44fefe27f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295d501f50f7e652d06c5de46c451ad7cb04215c608010914394dbbfd181db72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-terddf-vrfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07035f363a1a45fc752222401980ceb61f5a8b25b9b9f70f5682a44e26378255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-afgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1637202adfcc19982900f3392cb3e30f8d16523f585da41a0a67567e2330b93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb5bbdc11d95ac3f897ad6cfb65e8f4646325444800eb973f09a0e0f74bf81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176016 Malicious code in miba-dafdfa-naudsrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fabab8345b71c9fd60e5e120cd50d2d44d28a0f576ee7f947b409d6dbea373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175312 Malicious code in kapvino-sofgdani-gagffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e308e895980f6feb2783a694eea85799634c5c8fe16f04e8bb78d78dce9fde26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174903 Malicious code in indah-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77988d1cc2b22a9dd6dc509a36b1f232cc9ab9b041cf8717ab35c34cb3467a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179210 Malicious code in tray-iutup-ubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363455a61ab1e09dd7d5a86bd4f60bd24802a66af6443d7a41120a5f74288f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a18b323e376365dfe492ae79e945d46703be48b0abf3ffed46722e2a120daad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174639 Malicious code in hitachi-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7971143aee4e1107cfbc756f39da1d2ae14f409918a74c60874bbab13fc47d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173774 Malicious code in butry-putyi-poiy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177b4f560e478572475e61830c14bee4582d7a8adc03cf027a0bb4c0a884b36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...