MAL-2025-178209 Malicious code in rindaman-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40365e5946a0e2ca61bb2da1f4ba285f5d78f86585ac91996a8804d71024eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177803 Malicious code in polymer-avfifa-fasabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f484738e7d1f6d5658fd62d1e98f3692cc5384c5dd394d0861d818edcc1eede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173217 Malicious code in buis-masi-maffmasdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430b3ab53ec8ffe1c7917a58e85bd481744b31ec7944a5b442dbedad27e73871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174353 Malicious code in goodafin-nuig-gibafgitaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d5ca56d896b45ef9a0ad2d12db4129f8ea936efcaeed81b469de46ce59172a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4dc20a983854cf2efd88c0a8b59f8a97f9304df8b33b4f8088d80d18992e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalalkioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922b9ad0201abb81f89fde88bf3390fbbd34206ec163e2da8337ce6ab4687024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b151e3fc0dd80288b8de473e5a0599a030deaad63388a92b7ffb9895f07db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8b5f0f14141df8a4dea108cfe76764b38654a4810461ffb48888861dc041a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-nabja-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6e9fa20568de0900010428502fbb389b660b14a2d64ac8ccd8c67d3c1b8035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-anjifangaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7ddd5d3be818ac88bfbcbbf1c06d8ec0b0ca1f05f3ec3387568bddab099c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumba-vs-budi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2054eaa613a1e74d99b93749e1c6db189e02b2e715cf702e34afac0d3ff46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaahga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0566d0e65acb2deca32c63e77d92f0d27261a1cd640ae0a97e2c6e248982ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2f4fc93adeb6ce7d8a7fa5fd34355e4eb6e4057ddd8c753eb0b88f1c9c231b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c26b837d582e1db473e6fbccc84cf37cae60dcce0e1d292095f14181a61fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-rofifafad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d10475e5d6f997549b9ff7368cb8e8abffa1a7261c87e541593913542b214d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afmsahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7898535c649041fee364a773be40c01f642d5424310b9b17f73ba332c5e98aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoalamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f998b5fca7e60589a2deb8e395f0e34a0f768949734cfec00afa4692ace05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresfd-teadteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eca7cbbb7c275d5515b76890a9fdc3c7324ca937d7f1ff951d5c1e7af911aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7420db2f78a90c383a502b9d4fd97ad41e620286971191e76af0c2aaa7213223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kil-jakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d463812c25fed8f96487cc91d6d058989f8b9a6bfe2c533363ff8c688884343c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...