MAL-2025-173782 Malicious code in butry-uty-milo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94b4f4ed82449d056233768eac36cd703eb00bc17522a033d7bc47d84e7fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174036 Malicious code in divata-tuag-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e92303e0685a03bcb9b773440f7aa86f4f8ffc789e084ca0380479dfc1e313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175788 Malicious code in kupaio-ukutoila-jokilokluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0fec56eacabd214e9cfeda363f4e86d34f86a3234046bcdafeb7955448c2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176906 Malicious code in nuragi-sutu-gaaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458ac9421392a568a4fb33c9151f595bf0352c24f70e36e53dd1b098eceddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afiamafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1532f2bbd01f3d621417a818e3a6ba8b0d84eb3d1c079e751138dd4050c5970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179182 Malicious code in traasy-patrai-paans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bac23fba08698bbfc8bc71766921eb2dc24a3ca05a2e8e8fbea32a7fd8d609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175108 Malicious code in kapo-sadau-mima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445fffcec2f202bb9f02bd4df7ecb18b4bafb67b411706b97113019e865391cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173857 Malicious code in diva-bai-imbufabaamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a52582671a9ab9de6b44170674f96ea61cb98f8446a49d8d509eabcf0fcaa60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173280 Malicious code in buis-suninana-mao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756fd26bf8c68dd8a692a16cb1ac7f3da0994bf78b9c0e9f9752595e39d29b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179185 Malicious code in traay-patrai-paans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a7f18f0c8b8e3bf48d4060feafb086f04d837af50a41410a1b867bf0bda91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c961134f93a9fff8dcbe1ddc1320f345b5071ddd5082b035fbe23b6a5ff5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6ef664e9fab0cd1493feaa008afa810093d206e9e38ff4cd929806f28442bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-sati-fadfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31041c6eb758f737fc72b7efdd83e40839b99e0ac7a2d94acc377c2b185d47d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in truay-ozp-putrd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ffe50eb9e52408360c9a1b21eea9894ce580d3ef0cebd957a561e2bbf80b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaaafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b6d3e8b6fabf9cf375b2652fc84b826fea20211793d8b5a83f0e6a31dfeae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd10d49ab30c25a932f86494b9d3470319662153fe5aeae00afaf724078ca6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunvu-mudvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196c28e464581247e9b16fcf789b727699a76d1c311e8d89f8cc275acc0e2365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8e229c716f0629655d4ce9b8351042036cc853d115e94cfbb8b43d76c29496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tunabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5a171c0bbbb7c7fee721c44c173269abd8ca467bb55699a28b9a567f63e7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cd7b622e53299618726bbb7711e4f062036006ec0f60a42aad6cefc6fed04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...