MAL-2025-176295 Malicious code in nnnnnur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739d3890e9f74b5d122318199e841036f4fa66eec90b648f037a944bdd1360fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176487 Malicious code in nokire-nakaocil30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c2ecd7c8be18928aab0807b85d0bed3472ec3cdd85f44bd79afda68abba84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173522 Malicious code in butahu-asfauui-dufusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d994556611f935f57372d1211079d07b14ab712c052f9a069e70cb0cd1267f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiiaf-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff9065ef371bbc2ea71932fb909a751d7f92cb7a3b5b78a08480675496e7556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2f4fc93adeb6ce7d8a7fa5fd34355e4eb6e4057ddd8c753eb0b88f1c9c231b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178286 Malicious code in rintono-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d353211b04a510c494bb30234ac7ccb0cbea90005b6d9c0963d9f952a5dde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174158 Malicious code in godi-tuam-inapunaupayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b537f76092db86c5207d4dbacad1b4db38608a002f3ed1236ddb000cb3fac0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaraamsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb466adde05012c6ccf8f70f922a091f0cf29be18019ee3b2313091929c8bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-nugusa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591648a8f88555f620b76e8825f61d642d4c8f4f830b03afe94ae025d172493a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-ahagpgaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9968eed4947f71f83ef229cbff234ccae97a6d2649f70ac1dfe6f15a1b9556b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-dsih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa72626c735f48b8904f49f9d9677aafc64c385e8be8039a2578f75197821cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoadfifa-aboddma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2adb1ca36f666b8cc591efc55fe2e12ba51c934cf884129befe355f4a62dfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb77a89181ca3748487a6dcb4d3132eb14427b426502940e7076936ecaa0a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ae942e6a6f95ec1cf9b575e06faf6f3ebba1c6674be25c8ffa41101d65d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-anin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb93ee181630b40e0a002bb071cff1feec402389ddb4613b0d2390acb91a42bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnuuuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb43c0fb23faa573e0979b48a20c59abcee5dfda1dfc3d94e9c9219a6e8a023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaur-mgfidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ed2f710a81e64b152ba52dd514116b0ec58ccfd0612e4217c038fc0d3992a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-mudli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4507b938aa3ab7640abaf9038b5901ee816bdd47ac7f1c16dcaf0af9dca832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-opzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773477cfeaab906ad08112a1c54156bffefb829c5b3e848f969692022ae654c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopnud-mavidda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cc5995664362d2cff582d35c5854d2471ae321b903cd2e74e54cbc73c940cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...