MAL-2025-178669 Malicious code in sgoodain-saunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0931b0cd4652950637002ff9330a169fab793cfa8ebb0d07d77afc5b6a5214de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174654 Malicious code in hitachi-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3401b57529ab84fbf4e914376a692548c9dd237dd3762b2bfa00f4d1ce658fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174012 Malicious code in diva-turai-inusunja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55d6fafe29b44a2f118595a317935e0751b7ad1a12cad15202c168134a73f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173926 Malicious code in diva-banifbo-imifabugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ae293423c6e7718e043bb2b3cbd2130c5943c39aa72f8080f3a5d8dc09d6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175671 Malicious code in kuku-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9ff82090d3625f0772d8858c8a131ed82281c3703d4f5ba368be5ac9404d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176677 Malicious code in nuilva-bavaim-madivacvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c6c47c02a0a4212dac2fe83ed13dc831eb357554baea94640635cb50a87ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178258 Malicious code in rintono-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17db2c53af2049d4ee70883dd8f778d8f97996fa18f912d9d2673cf22c4ed960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f11c0e81ef7b04860d8590a4aa59d152fd370581bd7f5e2c01050bd6d9c672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e841cd0d49956e50b7d65336ebad1ba69aff7921dea92d21ded61fdb4bbb121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gibafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7476ddafafd9283829cbd50f3e2cb5f278fefe01452d117d456f8f6ca5d8e4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-nali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d41de30991eee51510983e5d07195c57868ad2f8dfecfaf5177fd5be24d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2470911f362a165196d74e373c6d240cf968fb79b1f1a0f3af0e30a15576615e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fvpavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b30e6a54554ef361fb0b37454728ab259657f1f22887519d45cbbf866bab4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivaaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e002a74d6ecb227ea5ae1c06db2234aa1cc6a6b4fe1cf720031f40524828ade3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabiu-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6eccfb06f87b392c0c3e01af0077dfc2cb9059c580765d06dd9ee38fb25033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-fifagaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169370b2f69eb642874ba44413e65f545d5c9cd16cef4ac6fe05f9151c0506ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-houd-mavid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d353e0d28060ddbdca4a76f167a248ba1524e29600dfe3e1959050cdd926c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavam-madianv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e354d7a00f9a1a20b781a9789554aeb316a9d87a72d2baba03a39a77a6375703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-naa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1324a9fa13d615d6fae12a0cad107ec14c53d26cffa3f25fce563eddc2f59ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuis-boaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9baca5bc99b77b896ef5cd9725ee8c4cfb0cb3448455fcf6fbff7ee36022af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...