MAL-2025-173740 Malicious code in butray-mutio-uytnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18234247a30047608fd971e3f0052c554c69caea78b99627bccd28e5d932638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178807 Malicious code in tanura-sui-dufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762c40594f98870f1b08e76557c4edf56f40c9b7ef76762ad7b4064c67f13fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173213 Malicious code in buis-masi-madira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab10f569c102a3aefa896a0ab21070cf452e029a8110f82f00cb3fbb0b7a2d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174408 Malicious code in goodafiun-tufa-fudagifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d256cc8ddb6eead27fe8fba4e2d04b07f594c99ce2fa60be1c7cac978525c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174720 Malicious code in hitachi-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d9b8e346e0823cde1d4e03135ff174256db54b721bd5cc922ff5373924872d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178985 Malicious code in tearich-new3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922f8151427cbb1d871e61b996bb51dbc7f06b332cee34c7278f76723c62c2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174633 Malicious code in hitachi-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb8086d6af88e3eadc51114038dd5d2c004a6094ccaafb582c07a54259eecb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178526 Malicious code in sahufar-satiaf-favurafan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332f5337f87c92e5dd9db0a1a2731229c9958616050803ffeb7e8cea68c479f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177450 Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178219 Malicious code in rindaman-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe7691a954a6558a962417b8a1af03a371b0ed459df096ae772d2e46af9b8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174014 Malicious code in diva-tutabi-ivabagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52b38f56dc6b8ff0bc92ea727407a192889b9b197c1a0bcc29462c7c33bdf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172815 Malicious code in anaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e375a6cc1c691eda756cfaa7bec9ebef227baf4f0ed3034ca791e5983f00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172753 Malicious code in akkkku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939f387f01905f35ee6bb9b5d1e74534585a0f0c3d2ea29fde8054f95243a744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173744 Malicious code in butry-muipo-tuio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94baa7e30e256aa248a2c8140afd2c79dbbe307f624649df9effea194242482d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178749 Malicious code in tanabufir-softafai-dubuati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c9eeec500261ce7c52b8192e80175a20ceb1468c71394959a932d0d80b5cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178687 Malicious code in sgoodaini-sanuga-nutbagaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be274b8c0b2c4701074c4bdaa5960535d323fa780695034c542142d6f73f8963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiya-sutnu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81e63743729e8ba25b93ec0a3246f798db389aa281add8768cc4bf9c52ab10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugfai-imag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6abd3914c3459f44b2f1925a2a73fdfb9239905e24d6fb187b1a084f64b4e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-kangtasa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b5328272478ff28ad5d00b08a6f29385717f7daaf6317fb2f7f15696b73f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4d88a7c078d1e9ac66e29e62bf1a377156ece693790db17718d5599a05fa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...