MAL-2025-179476 Malicious code in anabuyi-inznu-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e343e369dc04544e5b9eb44c91e807e93f5217137271211f299ae2f63f4c6f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179844 Malicious code in lookingan-jaja65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d082a1f554a5b06498e80c480ee52bba2d6d3feefa1b677ea4a3695428776b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b70efb0eb3adada9d8c12f5cb112ffb1b6406f9c156c5d92436283c2621b443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-mavav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d26d3a9faf4f7984e738cd24d070992379113d07d12184ab19fca4ac6f5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c684b0d6cb9b0dac04fd81530a7974bc2dc8828639ffcabe92457fe9f7d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-madivabunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4823bbf1773960950bfd97000466040770f3b5a15e7f89b00c6c042facebd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea09f21cd51de514a9c57b8b794e20a67d65cc3f0a94e27d922965478f77c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faa-saiiaagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dbebd899673b5b7e5b79a1135fef389e316c63c3c84ff27e8507c1d95303e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trusd-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48825aad87c53d5f57d2d3115b067cd58eee2c82fdf1e2f7f693585bc14c803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoadfifa-abodfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac06882e692eba90f24c8fac77fd9707f0c680b5280ca3cc94d09caac6bc0ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-amafoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa92f61f59b913f3dfadbdfd5ede135b942c8871802c15a3806dc9b49626d62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafunhgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289eeb113b8a73586006b89e652b7eaf95e1c641ec4e00fbd54d0ddd965bef43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175777 Malicious code in kupaio-ukutila-jokiloa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97178f18e2d81f8bef561f109fca48a0758823bd7ae836236f104ec56c0ea8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-rgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da834e3b90985bb2f5625317a8b3ffc73eb030d0db219252be3913f35fa4beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174686 Malicious code in hitachi-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d15ed7e07d907a6153aed5a77f98c9d1fe69d9df01c493c94f3f9eb0fc40caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb77a89181ca3748487a6dcb4d3132eb14427b426502940e7076936ecaa0a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189d72ea6b61e87dbdf7e2a2ffcd8d88ec984dc0c7c6b853d6bb4fb17afec4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfdagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5e7e26c592049cfc23edc5d259659f15341250a02ff34987a4483a101b8c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-nafifaggfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ce15d63b4b925c7e34e834cbba959a12a1e31e1dbc479c6ef99d9ed5cfca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfi-dsuasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8ee806b3d1049b0029e760e1483c0424883438057080c3acb4f0370284c3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...