MAL-2025-179622 Malicious code in kisut-afncg-akif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5052bf7698273d2827dc1898dc191edc14b69f05f673b219af2a69b0245a628a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-wozsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63678e5aa561e1bb90abe9fcfefec9efd64358f1f9bec4451bde3caea403f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179719 Malicious code in kisut-fig-dikanam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3863abe732704c426398da187149beafbbdb17acd43ac8faebac3d532d0e4409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179905 Malicious code in lookingan-jeje34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efae0e0a6ed168eaede68788b57dbb97d6369f3148647333a5488cabe3f452f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-giodaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843308a7a27d23bcfa8bb616b47bb2620c0a91aea91d82ee6cbc634b78f16a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnnna-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2521cb09d8fd95014d7452287059dcddd92a5ae01c87d7b0968efb7326c2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fsboina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8747d5972956e0a1036ffd3af048c5b148fb9802f3933c263899cfbfc867c7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucoposivosv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d833f9ac21e5bfa663f9bddf0c9966c0d1323fc17f4e3b9698e1a5bb485588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f77f3e6bf67fd4375e5c854642b14408ba9142f356aa4ea6cbc120ec915781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fsbina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21658bf5f2eaa42fbd83ea245308cf4d906bbadd810038cbf66d8c7e125657be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d343cd40b4e595bd395b4c6000c711ab4fd4e7ba8e1155cd3cf7e8aff66367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-cvea-trers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf5f7fd20539430b24f07707bd36b831639b18c1dd5c222471b4e3d769cc2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-safif-cafguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58eadf5cc030cc3b14627f1566fbe8ea505dfa9ded682e4e61200eb4edc1d0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac772387e300748f1196ca47cacbe1f971cfdac4c6c960fe048a6e9d01be3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodassadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1f2916eafe01e2382f972652f101435d3523fdb6b8daac6a42a5d5ed6cbba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f617b4f641abbd682a6da50c09834c97940bbee853c0e29d61adbea98aca296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-giba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defa3b4c4192773458ecb145b354aa356dbb5781e5a47f8fa27382a078a8f25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79e1e1f22322114d2cec82addf6419f098c0556aac2ddbe67b7ab396daf09ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e956b8a161434c9a4829e26074b39673c0e6f2c2f91d43bf4c3971108820754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivaaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e002a74d6ecb227ea5ae1c06db2234aa1cc6a6b4fe1cf720031f40524828ade3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...