MAL-2025-173887 Malicious code in diva-bani-imbabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec96d4074ea48087063ccd0f331ade85151ed5b387889ffced99249d47b58bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176617 Malicious code in nuilva-avmim-ravosovia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d831d564a3726be0218d768cba30dd69cda3c283ddf6d4743f8f5f7cc8121d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173978 Malicious code in diva-tugafai-imagivaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57f16598f2ea83db7e34ad5d69aaa5e9850f829a058c4b5b6dbf9ff767deee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176099 Malicious code in miftah-mipta4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41aae59022ba4bd19d7b47a433c6fffff653a01aaa044cd81c51ae810d603739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177100 Malicious code in nuyar-adudar-baidayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5fd20446b6e2accd26746e92c5c53f08fea5f5f446837efe7a1692a4e21307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175244 Malicious code in kapvino-socvni-famvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9826d732d789c1afc31f25b6ecea91b05b4efa71f0d1ac0843b46686ed19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176359 Malicious code in nokire-kushina37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c10b0a27353591f20f312cf4f48abbf60dd4e1af0e00782ed4c77e948d4a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174060 Malicious code in divata-tugab-ivacaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f48ff472a2d7f2fa774a7643480eee0692ad217d02a132d3291297fc0138f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174104 Malicious code in divata-tusintabi-ivanaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b980f39d5075cfa7de3ec8c3a1b2fb5bc79d1a4755ff9823e9f01e1685aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-samvnavu-bidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053640cd1a24b53aafc134ad74417a6463f4ec19f32b267d168624bd8b70ae6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fedbb5d5c662b341e43b1be0ccf84e11fcdb8c41f0910a23769949ce3e5651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd30fd5d69c06d64e3e9beb33602bbac863040305cc8a824540d3596cb67b6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9d996224353f6e1778107f719c0024707f240d65d28412befada48360fa7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-s-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0557d6dec7124cbbab28a2b79b7bf3fc64b42611aa0deda8a3aaa4866802befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78212ecf061c6e73975fd6f9ff4c16ca7b12e21de8c62801eadd131ba4f79b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64c36767a63819a3e942943fbd25a96c69d2adc2e1ed808a8f1e3efadf46f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bai-imbufabaamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a52582671a9ab9de6b44170674f96ea61cb98f8446a49d8d509eabcf0fcaa60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb8fafe40bb8f3b232e6073751ab66b953657f9dc5972b49680110fe8313b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886a0d899e3bf2372d609741b120c31767c9c6b819194c85f1932523169169d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...