MAL-2025-178718 Malicious code in sumpel-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4e6270dac29a8f84fa31daf4e02e94e53f3b2af467cbf55335038b516c0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176270 Malicious code in namacida-nutayayafar-kadasida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cf86d867552b2bf014c04bee51e452f94a2732301027dc8495259f51105870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175920 Malicious code in mahiy-sutabu-gin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e157c750984d6059f5e0177cc89e863199cca889ff7b88bb6f4c4736d0cd902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174382 Malicious code in goodafin-nuiyag-giubaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff859f57ff6da4b54f7eb315bcaa335d66b00abe4598cbef6bb7e06de36db112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179180 Malicious code in thumbi-vss-busdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f9d6ab4157b171560a40bce91a05930d9c42feeebefe9e306ba51139f7adc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801d0332aad7a525c05d1a40e6782d0a99ae234c8342df1fa8a3724b158d00f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-ersusi-vadert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99269fb9411c8bb445a73330493a2e262e94893acf850d9a3494b40e42f94a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-haladodi-misalania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c78a9af86f156fb1732310ab332538d509439f6ea2be4d05188eeec73d7237b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satiaf-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a84a35bbee4d2be53a685e6e952524ba75d6f90c3d476caa2b6fc1df071123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakafafswofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4424a42a4151ea331642a717b884fb458ea44a2e10664241f3348c9d90d2b44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-rafa-retds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bcb805da92e605593d0dca086f6e65d124f4aa005d1398e873a0fc1349d14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippoa-inaofufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef2b00d1c34987534649b0e142701cca7410be11598b7427c6efbbc89bedbb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunabi-cufmgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76eb48a7664e6d1c5ea3f0e60f096394f976a359b95db0ae509b5696ef770bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a177a268be549d58b8e13b48e41d765fa93e429cb8dbe2a74fa76ac0148d336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2884fea8f1d261f1bbb6082055a97ffc7a4b33b8ae20fcd8bdb4b6e805a0bcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-yust-mutyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eee2706d69768335f234f0d981603e6c07016b02318932760846f75314c58fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1766a954fae5723d94fc5416a3a8848e8abc1c5275bc03cc607e1787d97fe0bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fbbafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eadfdeef628138202b59ca8e566de58bbbb06757b12de9462942b4dc205535b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6769c6d722951e9714490aaace660f1763d443fde177f782bb855b7b914aeeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-maivcavma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033cc4198dd657418a5ba666550f9ba6914a9813de6ff8d2455f137bd3f32266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...