MAL-2025-179147 Malicious code in thambi-yunik-vers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec8d407124f80dd2a2a776b8cf498592beba1bc570967b1193eca753c76cf85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175929 Malicious code in mahiya-sutynu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e348052341d50e8c1f59f3b886b40a0676bf88bdc26abe5aa03cae9330a1627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasdah-manasisgad-munsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0ad64e8dfca83437361fd743af62015b8774a0dbd1498ae9d741d510ddacd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaguh-hgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87c4ce2ea3b0747fca86eb651d7043643eca49a2a4290a0122cc3c795686e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c96cfb1f54d9fac8dd3e500f0561acf3fde384450fed86282c94a26514e893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173829 Malicious code in digo-kaism-liamkiaor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d4861249dc0b875952c5fda8a80b6bbd5b99d9e2acbadea925367b674a8848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176180 Malicious code in mubafi-suafnai-cauabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20df96773ffdbdc07bacdfb48fdc609083e0e10ef17a8eb51c9747eca6320109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173791 Malicious code in butry-yust-wer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e81760dbd4b7d84467d6bd6e9657f4c81e6706edd3ce67e1558d271dbdf7761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177016 Malicious code in nuyar-adadar-biufatad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f001d9e74a26ac772d336d5273bb16e907de05d87ce9d482b8e2ad4befadd08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175308 Malicious code in kapvino-sofagfgdi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de0d502679b3499c94e0e6360a91508eb2c014b8e4d12b069d7ed491f359d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eba669c3666320bd66861be95b200ec2524fdba0fb0cf4e7842d6d3335901d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173538 Malicious code in butahu-asfui-dsuufh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd844c2fa784546e04b91db425120b30f3954461cfbb6c6a1d9f68da7a402e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-maniac-tanbuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196e0848e07fae57dc68fd97b36b2d7bf642f7e183fd86f4a09c1e85e3dff874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamalameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8e60b36ff1fb2e11d055633fa6b2fcf491fe79b30d17ae17bac8bb1c7d577e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171061 Malicious code in constellationcrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc15b8f693fc285d83cc790b65f87c472cbd51ffac1bd1e2cfc3babf9489d555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saoirabyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df8ca8a55546831a0188aa4fb3134c74a4c9a343f83e34f3ac1971ba021276b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170897 Malicious code in anushkajain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f28a441a60acf5428862f95f380073340fcafd9a317ab27f76c808efcb11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172038 Malicious code in zecacosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df64ab8a2d24a86659e39ea8bd5b16b8034bdd878d6f9867a491167239c17f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd2df38c14e50c2142e9c99423406b1fedc2c4fd6d80669378226b4243b6a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...