MAL-2025-176992 Malicious code in nutravaa-nutafrd-nddfuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02440d847de2e5aa90eebda1aec0261586b1c78794879da9cd68a06616b78eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179059 Malicious code in thambi-fret-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8ea88f45243b6edf9dbf04d9c7e95b01cfbd0d16bf3f1ada138550d2228cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175248 Malicious code in kapvino-socvni-favcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ecf8479ba6ebc99fb95fbccb257332c8037ed68c0ea28ee3f41ce76f0264b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174325 Malicious code in goodaan-nusafa-nsafigassdfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab13929025b55d4df0cffe787f398f33464a19e138b556e367c1faf7e32ef11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b2c02dd12acffef2f0a7b219a806475ee0a07d1cec4aad6c3b8976239456e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee433b88eee606e8bfe5dc692c3522855d2bd85ecd72f5c02453e085a35c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aneeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8121596f7fb01feb6cd8d3fc439a15e26afcfd9e6092ae1037e491ea811538c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c58aca0c3c2ffc288ea7ac11ee648c2fd5e39779168de93e64c9b86e54b0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farsvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785498485bcb56d197fc79bef941fe96e8159325b53b7a8d3c6ef9d24ba0ea1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafnai-caubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4bda7fd77a7f66a51100735dffb60f38d23fc737077cdf5fea782311f36027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-aggalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df0118902a4a203fcb7fec2255313683e0db9ee0778ed4fc6b544864d6352a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafaufi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533aeff4a6755a7f5a50e689ce38e2d465b92191936edc3bbec6681dee9f7727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsaghohai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70279ce2b7ad65980835274baad3eba75d434eb302d3da346b8facb6fb525f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsagoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044feefffcd26d1f7b5192fdec6f3cf01844da412a727054e7afc4c7f375595a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adri-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8bc4cb616cf2f0240b87591c99b3452f136a630277a7aeb314f1e51ef8568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f59e39003ffb0c2c062504959af4d91a1affea7d89504aee02a6af99eea294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosgnfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8660b8bab7e145f3ec2134acdc00e1e31a3cfaaf9d59af216fb7ebaba4ff10b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agaffami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0ddb490a609da88feb7d8a9239ee41a97e39e6e510d828280879cd9cdc920a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1c40fa2eb37931cff63cd1b7892ea1a6ea943eb38575939b6cd59cf530ee9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...