MAL-2025-173075 Malicious code in awaaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c58aca0c3c2ffc288ea7ac11ee648c2fd5e39779168de93e64c9b86e54b0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177498 Malicious code in poglymer-ognamoah-afiagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8705eced1b2a37ae17d55cd1f87f3e5ba9fc5de3320e9a9e31e1313e592c9943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156779d99f9ee392e62a1fb6bfb6357a77a552cd1451d813569324e1bd93a848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177420 Malicious code in poglymer-ogmimh-vgpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18cbe4620f65cbe6f1e405bb8bfd550b3f226ae84551bfa3dc0342bf32dcf291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176601 Malicious code in nuilva-avmiam-ravfonasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48196fff82a34adea17452238fdc34d14482aebc23562c43fcfd85fd8819d3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f315f3c6203e88dfefa369f8ed9361f28b31751946ef61fabe537c0ed621b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b27354b02ba43d5c80f4aa250b8523d0ae3c0de133efeb99b9514c56cd581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174288 Malicious code in goodaan-ngafsa-nfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01133deb3510f85578d253a9059fb764c6873d014d38770f76b6eae23a43f66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173133 Malicious code in budi-me-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf99b0a5ec0798c75c092bbc7a09b34448b9f7dd687289f02c651303d8b1a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175235 Malicious code in kapvino-socvni-bsoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66c31e82cb4d4996b61fb7837307e555ab32197c7ea418dae90afafa92fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba09ea77b611d5ecfb61d0bd990afe23f5d469045ea31d4a9c0a4c97bb712c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea86abc943e37cc7f8b5dcfc064499df553b316548d70669a934b03b3b23ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0660768a7e3679a108a90f68dae07282de4e49f15eab8ef8a467502d4333ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-figayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c987adffe1f6a6be2de4346bcf332edce93bb955ec8e08e72a8508f75e4e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169179 Malicious code in trevora-cir125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631bd1f90a4dcdb35269e3b28aeb97d665ad5ffe76d3c398f91d1abb41d7ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153334 Malicious code in avminh-afai-fauofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d764ed7f10ce569873834ae4e66377a1290ce59c6fde98b262b205ed6a5701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169242 Malicious code in trevora-cir47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe6ff5ad14b593aeb7df2917cabc8e1d47acaf240b3f087a100c739aa77d89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc35f2383c035c4b940bb9dcde087229331e5668ceafa9b2db2d2387e2b9f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d916e5e606fe163704b45120d764cbdf6a50f0b2e73477f37b414bb2e5441160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butsya-sdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b03276796c61711ead443b46a2e243e0e3a057e1815c2eaccab923331be7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...