MAL-2025-172943 Malicious code in anidata-haulid-mubdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0824c29ebea73303c7f68a40ff906e85368f69307ceabcef2ffd03be2a79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175461 Malicious code in kapvino-sovni-gffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a651d85bccfd2ec3d6bff91faf18d80c9b919ba21fee431594d28a8ddd6bc0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173195 Malicious code in buis-masi-butmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabade8179e1e6e99a65ad9c4ea2bb26a2d33dd45799c877743c527a9b3339be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177501 Malicious code in poglymer-ognbamoah-afagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1318069924fe5c85fc91540924e32da2362670a97bf83ed7d116a0706802776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174547 Malicious code in haritono-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ded768fa9ae469543c84b006464268c5177ff339fa55718b8be94ec674ee60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a6e5d27d6d7c4dee5df04c3054b1fad0608567d1a377c43c9a9833c4e9f96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c57ffd6e9e45fcbb73c7c390d8423eb53af962b5e6c7a1add363d187aebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-agaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65606088704655e643b8ac706cee3897e996eb3a2fa4f400388e1cf9545736bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad2b294404c7f936b697c1ebe5c76ec24410372306bfd4c001534292b358619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-ammfaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7945570bd45d1049ad694f898c0f348ee960035e113ba2aa8b87bdba0b1ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhaghsbo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425f66fb02e17217d35bfe0711b13e6f8c837509bbea10b16f0c94bdc106728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-agammi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e28f7654891b197d44424ff52866245a0dbeeeb19f6d1aae7b53c7b9257577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutabaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acfc27b966e19fcdedc60238a5b29a113fbcc631931f600d9fc789cfdc5d1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c143a79b2dcf4e106492a472525c00e2f611110380867b1df13a2708e867267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunggsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7876c6dfc2346864cc4b870db1615de7db7fbafe629cf5da7b22712b2b01b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d9b8e346e0823cde1d4e03135ff174256db54b721bd5cc922ff5373924872d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3218dedf12c474433b6330dc36bd3190d694ec554211987d8713d5cb80f5c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1602996782dbf58cc9fada840cebb7749160f3ad1dae0ae36ab38beb5c6481eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...