MAL-2025-173513 Malicious code in butah-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b06ad945503d45575b764a3e8f58cf85d7b0c1c36e11324b71a3f670ff98ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175678 Malicious code in kuku-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d566cd553acf082e15777c8ecee3e0b02461094b2b8b146c2a53c8a4b2b5e964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172773 Malicious code in alvino-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5706e90317b82930734016969e099b6a9f008aea0ee927b6722120f1fef47df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178130 Malicious code in polymer-tresfd-tehdteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d320938913497cbf477f5892104abb93ab5e06b2e960a9a602325c818230e8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oggh-aghgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88fcc22fbebc31741497dfdc21ec6680c3ffd164f8562bf1eca7e5a0910370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaopoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88c37dab832e53b38b27d051b082aefa8e883fe7eb47536c63258e7a66b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dea51db246cb100a76ce5e59eb5c830ffcdd280b93634273edf10ad5887e0a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibbo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eb1f7c599d67cc0c18a184ff608717f8a9c3d9fdbbc0f1f94effc365ff5070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e963143bc2fadd80c98a33a3be3782c7b03a216318c5c0a04d64d053178193f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-rada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20df5c83458ef2e9f72c4f4150aa311c3d3986317458573ce5b86279b6aed883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahun-satud-fador (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7827c6bff514af8fb11a7fccc663e7651d676fc774de98e443ce91a518bb4e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icavib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561cae21e70c6196577eb61b244134f9a3b554d4fd456be1ca4248d81002e277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-maba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9793f6e1b04ac73449c530a401f840f1b8c010487fce0c7f38b77df440daa14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1940b456e9bf84021f69f5bbfde592313e85883134c6a4351025a5d302eb0400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufaafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532de853dfbf582529d2638c1eb5819d3e36a4bbeea8855e81c89aafcba7e57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutiayanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d7967de0e5d42dc44d53f42174283a413f20edc99b4be625fae38b3e1120bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safi-afcua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134ce33d15ce13dcf140b2cc6051afac93a4a0d4f2b7648600c586a96f83364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufafi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84237dd132b471afeea314ed8daf3365ebd2aae3dd8131c9a73fc8647acd3f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdagg-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8484e6f2d74fa69ac17a96213a907a56a073d94067f49ae7228831593f1e439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanifavvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51173918a99f29385597bf8a2ea5f7dc6a8f6ab3e6f86e22acbdd3320dbb99db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...