MAL-2025-174000 Malicious code in diva-tugfai-imaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccccd5885d42c1620467e7b9eca1514ecc501023442a94a25d337d54207920d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173396 Malicious code in buta-fbobna-gadaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3caf63c8edf54b45117abc1292466f42c2f7a48b21e60b4c42ef413512e0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-m-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ce0b35edb28c494f7df4eb7db7458270fa72cf163dcb8b78be0169297c81e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutu-gaiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233fdc6731d4c66bc7d61a1677983bfd24b57b1c9ef28468c2c1909d3d8a3510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasg-fanda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9878a84d002b964ea7f229cae91f8970001aa2f96c9cf844113038cb617f073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutabi-ivbgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214472c5bd4b1374d5db44bc8b37dd2309beb3deec57d36108f2b68fe9f8a9f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-sufi-cagasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4194358ed32e2c7855508402ebf0d072887e704da43da9e64e610a2748a17c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kontol-lo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de69ff5e6770b16c2a517078521cdc420e32a60646c94ced87ad1dc4fdc146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annuuuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec636b99ccc60e4851ae4f714f5ca3d6423942b9fb9854ec03a323bc5533d433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-tbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9ffc9fbd6d541f0ea0e8df541c437eefb712d6f686b92c9d14eda10e17b674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177248 Malicious code in poglymer-ogaih-gafaciag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4567804ea988b971e65a04d7ed2ae03526903a98b753aa1dd3eedf9e9c6650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176541 Malicious code in nokire-tanjiro6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d694693906da58b627f72d139f0dd41986ae0eedcf242285c83db95af156a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174220 Malicious code in goditu-tuamimva-diafuabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80be22e3ff2168386bd4bb1cfdeb5f307cef5c6c6c5a163efe6a388a369d585e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carolinaribeiro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3c7842eed631de904a86c6fdbcd41b73a6b524ff07c99a2022854bcfcc6d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adnansafwan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c997328136f778c256ae72f9f24d410928445bc3ac8594d0359c8edb5e755e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elizabeththomas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532c7de742f7b5410a71eb085c34ba63072672b0e931cb6b2a6b1b17fd32646d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-amil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4dd738127b97d6ba6d876359f7ba5439193f3db8b453eb2406abac5bc6d85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9348e35e9a94221b74d83d94fb3b961dc0eb93eda78b9d308b7189dd4407ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b5bc616fefc273e784560a66e3bcef9893fde49ece17987b5b290ab71ae4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-ta-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106e6780b85bba3413688a05d0c309ca7253341328e21cf58de0dcda8f17545f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...