MAL-2025-178319 Malicious code in riya-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb9852bfe582a1f407040f3c2a668d59253891e7562040f72327916abda1a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172815 Malicious code in anaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e375a6cc1c691eda756cfaa7bec9ebef227baf4f0ed3034ca791e5983f00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176092 Malicious code in miftah-mipta18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e4f1fd8d2cfcfdf2e9d9984f8419bc57a6d4d9059bb5e5ee8b3e3481d0acea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174051 Malicious code in divata-tuga-ivabaitnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5361888a3751e6e60fb728b80112e4c5d564ec59c9b93eaa6e7a5ad11def3a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172753 Malicious code in akkkku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939f387f01905f35ee6bb9b5d1e74534585a0f0c3d2ea29fde8054f95243a744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174494 Malicious code in goodain-sangunu-nutaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f8e83f3286edaec5d8d809e59fca500f803103281ce4b09d5d3124a06b1eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173607 Malicious code in butanaih-afsfafi-dafififif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67ffb3806641d1e585fbdd84e188372bf9b4cfc1910e1ed6a222a8a2922f851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176086 Malicious code in miftah-mipta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bd7785c84fbe79147be2f606bab5a1dfd83189af19dcbbbcc5a52fcc6283fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matila-unud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab53d5e845dcffe030f200ec1697a7117bca926e29b481392c70f82d94682a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-podr-guled (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d118c9678b53d5b69d584ea15f36fe98497b0e3be79b7387c59dfe365ee40b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-lead-manda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb2012f86292b108cc8eae05f0f37eafd4e961947b4c8db1a5dc834efbf468e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172093 Malicious code in apasih-ledong-pok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd597209da4c8178049cc92f28e2dd80ff3120c1f3cead47d98d4e741ea6a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-maia-ub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c92fcbcc07cb6f98e292425853a4a3398ac4fbec24366e8d65d2ab555b16a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172310 Malicious code in augis-pomoi9r-nsusdsfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ed5ca115f68aa008e2639d9b47628b8392d8c2e465573b774a5447245658d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gppkri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b1a45767b8e73d32c9db8e6c436b8509f70170f9caa5085d11691d479f8b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bilalcroissant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d4e0601c5402291ea8dd71971b55e73530aabc636f6f36f0330599b0eacb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ciaracollins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903b407ea4e3b2f8f9423e41e58d93d48e1287a5ff9fcf1f3e60a400fe5740ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7994bf8b032abe55b873e0bdd54e9aacb02c855cb4bf62cc20cb3f8d25737c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638290d39741b0bff7d8f82cb35434b6d14fa8091db6c13ad218af335276df97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d9627d6731e12f967097d1e16257fdadc9f14455955512875e6b1e9c2c9b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...