MAL-2025-180593 Malicious code in teate-thy-sonic-keglug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe9fddb6c9b56c4a55bb1f3b11c2b51cd297a6ce481822e5c24b4653a5496de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfa-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1972910f6bf6eedaf91bfaa6d4dca4b379c745ded80bdca22223bae745bf9f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7e43ce58fb3cc4971e6cdcea4482255752e892c5b7d9aa6d59bea314eb5432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dufaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d578cfd5d7a24b92407090933d339fb3227816e7d25adb9899f814ea29a7594e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aabdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfd5bfdf2465e45ce6345ed0d088a07bf0f303df2b92f10ffbc11fb9d8723f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghih-fifffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ad5a8a8e0c5e918ac7e89babc8f0f78f77cc92c034dc531b4e574c9f04c1fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-boffnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ddd3c4b466d5f7dbdd5b81ddde178cd1e70802a4c2b10e7fe4b9ba04722c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigg-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d299043022cfe30c7fd0762997a7c14ab01f9fdd3f419eb64bd535100f671f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nubafati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305738e5f8fc37366cafa5ada1976416fce1dc4e282007f0f3d428f939cf4582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gganda-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c0b8abc2190258afae5e38a356f013d5fd786a45192c5dd84d830f4f2ac366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbada38ac46a85a979744eca118d78fb9358ce62a531a0c345243e4ef26007d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f54726ca140f96f2ff1904a7553dccfee70c7adc7b5ae5716c0d0e69f432701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvavihafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92715cf979e946a8ebb0359c12fc99803037f67df1765c61c5912e3aecd10a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb1ebd2944bb36a0fd73ebdd1923ef13d527674206b2864f4042d340b86e033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-acabnas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593032655d88a20fe76933f326a6996dd1e5c0b42dde513ab5143e7b77a28e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176406 Malicious code in nokire-nakao16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda320dcf228623ff1a7925832f5e4e41ceed6572e70fe1a3429ebb932c67f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173433 Malicious code in buta-fipanoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e09f075b096d76f45b35faa3a4a9c53c96950696f86aed08353b88a9149dbcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174714 Malicious code in hitachi-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8717d2f885861f5539b6101ac7afcf8e7a7ccba198a987e13b6d215a30a191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176950 Malicious code in nurnua-suif-daganayaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fec774fc95b1add8e43e1dcf1697399139395b15b254b186684af51513df146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174175 Malicious code in godi-tufam-iunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f25e7b2d1102044b8522042d555395dffd16eee73d0e1f1e4afe21adb34b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...