MAL-2025-175780 Malicious code in kupaio-ukutila-jokiloua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adb433fe17da21678a7aed11a101e9280d4b0ad0c876859c977684619fe00de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176649 Malicious code in nuilva-bava-manatad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24572d2e5e5bb4df27007a024259cf6182972022d3a9fd3ce0724f505679c345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173278 Malicious code in buis-suninana-manado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9717a5e2af7249938ccdc63111047caa725723d1c1ffb768c862f1f3e32d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178390 Malicious code in sahnim-satg-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422a543351a017d6549a83cca005e23a84a2f6b016cab666361f44d89d790d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177967 Malicious code in polymer-giba-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4ce2dd574a9e6173ba00f2b4ef060fd293d40f24c2374c9977307fb21ab9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabamia-ditud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ab0ca47aa40aa6752a314d695e502876f0e29f0e776c35e9b6ba719e5845e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0baba630c81bdcc7a7c26753f042ebd68da509b061f3da0823915f325c58bb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucposivosav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8959a35db3d7c8ddcb7acc90c910a392f7b347d89b94603483fa5b7a7dfd50ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18828b1fc982ef6699125847d1e17e3b92236d47f949505afb16bcb9e4b5ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosogonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fe57e9091c62449f878fb69de2dbeb45343a0c543e4df28094eec7d10b3067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c1df2726c9b6171a996997df412e8787e6cfd3557a5dc94d0abc1784636971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173935 Malicious code in diva-banobfo-imufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8740c6156be0c6ff4e8997aafc874e8080dcc1a0475fe08852a93fb840bf10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172736 Malicious code in afriiiiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf65810d017ba413913c2cc1a006c144f451d9a179271fcc6264d83c75773fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174761 Malicious code in hokage-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b769261fadd7b74954ba107b36eafc384a7132206180de4c8d51d4ee15d70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177281 Malicious code in poglymer-oghih-fifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69ec4aea8793c2b723423888521a3bee58afed4d97d529ae743041d91bb8abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178462 Malicious code in sahu-satsmug-fafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36d82f855e7990a1a11ab32e13aa2786242f25be1d2e6bf5678534c6acb8b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178852 Malicious code in tauhur-sofi-diurfay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e747bacfd62d3b7bb949532c3bc75d3f78a05a9f4119c30eb2911c84614f5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172835 Malicious code in anak-jalanan-mdn25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4279ecceb3cd250c2fae4014661715e8540aa93e70b594d8eb391c41c76087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179024 Malicious code in ter-sohyun-srasav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7999bf0ad2ff8de5b5a2d9e1a2819dc569eba14778f80c965b54d0e530563acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177492 Malicious code in poglymer-ognagh-amifagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21940f1bd552f6276659975b66db617245664bfdfb8a4318f92cfb32827a8dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...