MAL-2025-172871 Malicious code in ananda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed858b064cecaba317074d11882b1b22a7a9612ac5f64b094056db593af10f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178776 Malicious code in tanufahuir-sofai-duguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ead9cde4650dca24b2729ff5cadd2a1cf227e5d71c8e987c791e49f0b0b94b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178805 Malicious code in tanura-sui-dufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b610aeaaaecdb2be1f2632a37843d76e245fd534bf2c9d309886c2f99fa9a9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175263 Malicious code in kapvino-socvni-gbfafgaaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb85a8b1f186fa7e4f19033fd533dfdb2be0ba3bd1439d7ec3676da9fbcd65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172943 Malicious code in anidata-haulid-mubdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0824c29ebea73303c7f68a40ff906e85368f69307ceabcef2ffd03be2a79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadg-vafgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9263b0d1afac10e6bc832d01e5647b6c324cd9113036497fb67edceb089f9e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a981a7cd59e8d93a6620357e4e3c8a04f2b64eb0cb590113b653a4ecae91a789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaaia-nufti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8620ea2a722291fff2eeeb769aa824ae40870ee5e55ef3e41d69bfcfdc13156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29197907ec9a5e646f77aa49b4af9062073da817b74ee4069a6c8bd5d01e6ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b4eaf151548bc3a07380ffc9f5a9d924bd8909889d463bfdd2df0035006f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurt-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914b1340cf07532a55667232a448fe6ce0bc3439b1963c4a155c6d7a9fc0e8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-pran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ed2628abd10b1a53b2f0cc60f47c2d6185027567da1a289789412bd6a0e17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fsbina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21658bf5f2eaa42fbd83ea245308cf4d906bbadd810038cbf66d8c7e125657be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3745f20de1540592ad82b1421f16505afedd8e75bedb34f2d78facea84aee1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51c6d5aabb2a093edd8544a7a8c4c77738e7afa09e89f4f5210beb88c90804c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fafihaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e032b93fb182fe85b86f749708cd192fc179edcdae7303c0e8df4cd8e3c5f922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5642870e0d373c2fd8fea1cea5c9d1df5c3da386ede26b3ff0bc3a3669df0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90db83d9ae29ff810e3e3168fb9e4f382ff923c060c26cf27c4d6d0973c7dc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufufaa-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852f7b2400f6184db31577bd9270b20a809fb190213ddb237e5ad11b6c0825fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...