Malicious code in zaskia-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185c44b6535ab4fbbcdf65a062cf49981a576f2aa0186122353d3fd4fa6142eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8059bce59a5dd7634e8db9be2a908df14e242a80229a5636d8405f816bcacc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35c967ad901cc6975d654e86d0568fafda4920417f4c2a4e4f6b835ef04b6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-smu-idabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d74c87947aec28bda00c39d23dd58432513d6c3ccdc1eb9753e590f02bcc1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fb2b7ed28f1a3884fa63dc342221d63aff4600fd6aef0c39d207d5c23366b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-suif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0418809c2f49a06e0d05ae1a4b4cd9172dee81aa6ea1473efe91106c3a3eb43c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6c6e0f47925ba9e7f34b02ebfff4b745285f36b3ef8afcefdc5f5c418efce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tabiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ced4642bea7359c68e46919068ee87c11566bb97886945c0dbcf5a651d05e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-iaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b1a420724935c13880b8eb27645c311be3227ec2890266d0fcd9150968dccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hads-mamadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12eadb475342f41cebc9f80fb6f485547fd714e47b4525b1b54fe187120350e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avfifa-fasabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f484738e7d1f6d5658fd62d1e98f3692cc5384c5dd394d0861d818edcc1eede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f97a29cb5ac2d82d6601a563d04c1b97452a3b4693131e2cf2b2b21520fa84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32ede516307320458bffd645c7f0a5dbf27b0829d3f613db7d623754e279e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcf6235681ce1a007f5f85aa4f9df97556a3b7e78dd030fc828d55bb8de5c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d459c6743cb873593e3018a66bb39840a7ffb5841ff1bfe4313eb1dbbacde204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f27800ed5b7ffea490cbeb10342f30cbb5280fae4a0cf223268031ffb2618f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nufti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86108aeedf1f8238b5e28b0c66e6f5eceb571ba29f0dd1b8e2baed3208122c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufaam-iunatyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b28c6f0902bae9ab5ec38bcbd88b969ead6480e1ae9bb2136a1f64e61001526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomagiabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0a257f9df1ff26c778c28c1588e408ba61912e8d15227eddbaac8c6c7cbcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178649 Malicious code in sayya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07f1cea58a9fd9b9bb26c32a9eb0ae26eb856caa0865887a544c0c204526811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...