MAL-2025-178839 Malicious code in tauhur-sofi-dihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252d8da77df5ed5ad3b95cc60c5fca6078c21f34b56525684b1e180d7d490b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174290 Malicious code in goodaan-ngafsa-nfuabaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a485b2da2542e11c8da2bd046ada6376e47b6f97217a8bf0d463303e6942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173014 Malicious code in anita-butaur-msdagfidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c23d4888f759f2966c05ed2eb1c4569b43c1b35f03ecf8dcab9ccba9602b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178326 Malicious code in riya-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394f410e7d454185b2176888734f3c33b5fc15012381482c4f5be50424a83dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174593 Malicious code in haruni-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663074139ebcc44f7690a31820f38316a256f9d11191a2d55d16a80e05cc786f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178177 Malicious code in rindaman-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a83d2af1e99dc9466ea08886cc8137d586fef6f4129e207d6a13058914e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175766 Malicious code in kupaio-kullaa-jijai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1493b12ce0c420ce07edfcf2cea58744dd46ffc6dc58056f4e2f3a6d8a4bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafa-naufgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a398e27c14fe387fa88eeec96aad162b3e5fa8e00149c70ed52a177a315517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-muayt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b31577cbdee6b46a48230a4c3773f279f483d81f8d3039580c47e7e48e2186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f8aeb8d6a8c0643c3f19c3b9458fb53189fc9b0f2fb13385e3fb295a606ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-rv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf18f146841202d549593d2f5d98eb5704340751be45451f7840fb3ee971196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604982791f9ec760a710025858db916eca537f1734c956442f5ebeda7d0c87f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaiha-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a86fe4dabdaaa8f16397b80c575294e21c824d648131f4e8bb219469055375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ded768fa9ae469543c84b006464268c5177ff339fa55718b8be94ec674ee60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufia-guivvog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3dc21a07b4f59fe4630210810f4989f7d50b54239078a619f5942087d07126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3d36f446733ffbebd2c29cf7a505493b4f1ec943dd2eea1546a74a7a3045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresfd-sesrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cea16a937ec9ce467ea7d7e271d3a7cffaf5c752c896e90531654090588fd54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c94f562b512e03806141b96cbe9e8df8e77dcfeade7ad6d3d6f99dde55ad180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f793425defad668fca7a63d1abb9b7e84d8ab298047d42d3b19e1ec834fce53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aneeeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8a3fb8fe85907c7076f2baa1a1486c213103504369fd1949a43872cd06456b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...