MAL-2025-178973 Malicious code in tearich-good2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9985e099c694c26950e215662b746895a751955bd13afe4457ae0d25c1339b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ana-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd632e820837b776208c045812dc3d4830245590cc487e4d1c0f0a79cd865cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173244 Malicious code in buis-sunia-nafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cddc1c50e6ae61e541ccd0e6238543c64104ebc84e74bc25965af37602b026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175160 Malicious code in kapvino-soafadi-vnds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e34b3c7e5330064fbb8e85f4f6747de492050f0381eb327ac545d8da9f0571c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87c2954b15a6fd9530bc57df81fe29cf98e671c3da1f9f09439a502121518c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37167cf41107d871f8bdb660ad7d337b0e45dd06658c46714c8ee3fdc12aead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdc0dd270cfd68c3c6bb10f696698f7ec985f4494193568c34b85f4e1e9e725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178055 Malicious code in polymer-idasifovagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08600b4199d28fe9e233a2d496fec00274ebf73fe4f0f340d5fde36eff221188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufanifufi-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee3614b425331e5ca333e906dda4d074a6f0e8a65a190710b6663a8f4f178bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah9-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c09041a2e7c54ff28a8bfcfb5adef7259065258fab54b9fc3ac8f05f724a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175161 Malicious code in kapvino-soafadi-vnfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077b5b29d44c3c568ec772771a0b980b01fdfa3b261732770ead0c45b8c8b223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-roffafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84b3e55fbae73dc843c99027774db298671e13d1f0965973f3d5ed7e38aaa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b987d38b7c9f50c43d7b700e8b62e5ff9a3eb327c9531db0a5a699c1cca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edd26050e3730b3be2fd8476d2bae3a7797d8232689211ed31c67a43148db98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176704 Malicious code in nuilva-bavia-mavav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d26d3a9faf4f7984e738cd24d070992379113d07d12184ab19fca4ac6f5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175955 Malicious code in mahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca2ee2335f26294114a8a1378d6d8ea5cbe8d480273c9cd6f558d1ed200d7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179069 Malicious code in thambi-ion-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd2a9b97065b292c5d9cc64c2795cf8cc334c97b3a6c673ad55b6935851605d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174449 Malicious code in goodain-nusafaia-nusafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a43d6ab5031baa05c2e5cdc5a15e87f242de6876319585db9a9db3808516f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-acabnas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593032655d88a20fe76933f326a6996dd1e5c0b42dde513ab5143e7b77a28e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e450984e21585d4a10c35c18230c4dde3a1129f1c25d8e8a6f2df273adf1c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...