MAL-2025-174819 Malicious code in hunim-satsgmf-anin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440045421f520cc57ab39f46e19c7f7d5a39373d8e19e406515abb0760471a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b2c02dd12acffef2f0a7b219a806475ee0a07d1cec4aad6c3b8976239456e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a37aab815a51fb280f9f537bfc0d48354cbd977cc57ebc70636c64c35929b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee433b88eee606e8bfe5dc692c3522855d2bd85ecd72f5c02453e085a35c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aneeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8121596f7fb01feb6cd8d3fc439a15e26afcfd9e6092ae1037e491ea811538c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c58aca0c3c2ffc288ea7ac11ee648c2fd5e39779168de93e64c9b86e54b0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farsvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785498485bcb56d197fc79bef941fe96e8159325b53b7a8d3c6ef9d24ba0ea1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anuuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687f3eecd1ffb55a39243ce14dd961b2798ad362eaa72c88baae792296cb70e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutry-ipsumt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de794db3683a2ca56d036a5d2a2d4cd264f066ffe7dc0c049b40bfe844537c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafnai-caubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4bda7fd77a7f66a51100735dffb60f38d23fc737077cdf5fea782311f36027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-aggalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df0118902a4a203fcb7fec2255313683e0db9ee0778ed4fc6b544864d6352a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafaufi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533aeff4a6755a7f5a50e689ce38e2d465b92191936edc3bbec6681dee9f7727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705bcd27d44045b5b24ac16331dc988920bd8ecac74dcc53bf6f2ec5db00f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-saigaiagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9b2292cd4bce64b371a4ac6d6d3ce039eb0a3058fa3ded20675cbc1d20764f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-nafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a3e511b9907985e1028870e0f2ccd091320a974a0ddd1e84f3868867f9e416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175065 Malicious code in kapino-samnvu-ubdvabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5bb16116d64f43d69c2d674feb87a9f32b0351db6c4423c578043de0ecf217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179059 Malicious code in thambi-fret-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8ea88f45243b6edf9dbf04d9c7e95b01cfbd0d16bf3f1ada138550d2228cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177520 Malicious code in poglymer-ognboagah-agsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e9a051e1f6acc913d19d8f000262e059f3edc79cc637d75200b11286f5e41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176992 Malicious code in nutravaa-nutafrd-nddfuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02440d847de2e5aa90eebda1aec0261586b1c78794879da9cd68a06616b78eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...