MAL-2025-175642 Malicious code in ksai-kiloa-kokaialiaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3c06a171e3f01cf84efcb307a106912a687b6c4ea9150b8196366fe4e36150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178187 Malicious code in rindaman-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f44dd9de347e538221c178ef70c8c11535f2aba4ee98d914b7e930f68ab80eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173955 Malicious code in diva-banubot-imubr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d75dc0c609f68f4efb6771571198da677cf93173ce278292f5d34fba9d97791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179142 Malicious code in thambi-yunik-butd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a1717403564fb17e626b624658a484950157855861fc20941b0480636fb4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178158 Malicious code in polymera-buyaita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a221ce36e85efd28f67c69399960daa4829cc637f803e7f235696bb7068d7087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-igaighfnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c931b7a1fcd8bd5146a6ed43a95898b98822c578ab8671a78c015e0ec7b357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-agavsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e23df6c846965dadfd962fef37c9280a8ce83c9723fd33faa689c4bf03f43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aghshgiha-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53cce3b1b3162784433b1e8849cf85f565d21601738b16412e7a7d1a387aabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dsusufh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ff96986786eba86f303651e765c9e3850df994989a7adb9b7c8b53df29357a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danabuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914b353d7a397421cdebfb64bcd05535ce622d508d6e1772e63dca03e33e2f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infarudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe39b83c55cecd956983ccbb56cf50174f84e226666554cd233100a7ba37263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-saduda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8151e0d29533a2040eb4e43b07f11ec5ecdd71b3338fd66bf6c37d9d9c3a6a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d806c68540240389ffcf3c27fe194d7c22303abb082c96d6302a3616bbadf00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c778c84d3fa089c3ab50bd74d604a89f64307acfd19cf868a94a8e2211204aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ea69a9298df1308b797eeebd91bc2c4fb68413f59bc86145af882d0839c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdafi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c126fcd42b641be2ce415094009ba29f12ae51b337a92eedc8edff2efd5670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ddcfb23a5d1d7b536eef4c3fd361e7cd48618ae5bac94c038e43e9dcc5250f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nutayuri-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad97d82a9ca6c0aa45b45756fabd13f3509ca41e5a29f16290e165f643df77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akke-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb3d9dae21b2b2fa5489f72f734ca8ab21ff31e7edb4bb280b917e12c0d7050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-maahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0722704506898a703c46903e5d2f9f48acf00660d07f48714e4cfbff15970bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...