MAL-2025-172857 Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174403 Malicious code in goodafiun-tufa-fgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2d707a0765f5cbbc9c8655b02c96bb99497570fa988d2e676cd0d0647fbd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imiaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1abfd95e50c51228791999e162f9d199edab57395b756ab4766aa100a51f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f25e7b2d1102044b8522042d555395dffd16eee73d0e1f1e4afe21adb34b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b7b2a1a8e1277d9e1c511cb6b627c36367683228c82839ca71e7935a0d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samnvu-ubdvabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5bb16116d64f43d69c2d674feb87a9f32b0351db6c4423c578043de0ecf217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danoafuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3483114e6c87e48713c3053a1de1abffe1a48f3e23e58e8f73e7522c411007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f88e58b45d0705dd79a88727676ed55b6ed4bc65205da3bac8673b48d5b959c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nutgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0440aee00853a9a493c7a14c5b5dbdbcd5d3041dc2b2dfb39c2563b5d18bd885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf4624cad06b483f4e268174353bc5e21b5167139b873c10c87addd7efc061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-abohoahdfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e8214d0889092d8b46662cd7760efa030eb37af2f94686226839d0582c994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4ac0630e581dbdbac200b6893ea64dc9595ffd0f2ebf1dbcc54c119014de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176313 Malicious code in nokire-kaguya22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2296f7bb60518e396ce9d5e5ac2396ce855027f6af366047408860f99360985d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175627 Malicious code in ksai-kil-kokaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f37a7095b8e842ab370b1baa79078aa7c8cac6cc1f1f29cf7b3dfabcb5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179206 Malicious code in tray-iutup-nusady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1340054155ce91aa47c9834871d451da0ed26e7e1023b47096524eb70cd0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178282 Malicious code in rintono-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c7b5ec150ddb4446ffc4f39c57e32680e9e8d36e9eece90ca45dbca0dc328b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177870 Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174776 Malicious code in hokage-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29277841074ad498d57cbb0b4b1a56dd420aed9a44cbb207e58d778e28eec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...