MAL-2025-173904 Malicious code in diva-banib-imilavv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4760f00683e7c5465a156df032d906aa16782dd9446b0b3555fd4240b73cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179208 Malicious code in tray-iutup-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951e22bb423fec98be2560c57e2d0e969db550395c76df4a961e8babcbf54538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178319 Malicious code in riya-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb9852bfe582a1f407040f3c2a668d59253891e7562040f72327916abda1a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiha-ayag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ceb42676865e5b4ff703d4351d93f36efa2ed2ee9c3247ee2ad4fcd0d464ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahof-rafgaago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7266deae07c106c5b53e407ca5b0376debc935ddb2cb70d88f17db2f29f1298d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca2ee2335f26294114a8a1378d6d8ea5cbe8d480273c9cd6f558d1ed200d7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vers-brts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16191c70bcd1d88698fea54ff71eba08693a58450a2cb121a4184c483c98e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f410f1267ce3e7558be2fa1986543666c909a6d39835410c7de1df06ee9f3cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buyavadia-manha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06797208793fc9670d607502c2204268a3756f94f5a329f3c85a283ac39faee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7182075b4a7d4cb7a4e3cf2aad5865140a3b9aa909e06fce5ac62032c9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiu-tumva-diadblu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff36d7b3e4d57508adaa0f200c803d6306f140e5aedf2712a6cf2ac02cd02979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-ivioababga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b5b84d917c9121603089648c51bdac978c28c1aed0a908e6bc1b980306641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jalalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7678b5fddbe821a1bf32ef99597a430f07447b2392d8f657ce58d7266bd40d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rrrramadan-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9f0d564519079dd848ea81b538e9668f04a84c53c8256c3b1541c59e20f268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gaddafaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede2734b0b1b09b504f9729f517fd3df3fb919c948a8a90b2d17bedafe0265b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diharu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d0e81475e83cebc9c749a3225d5f59636afc4a02ae74b67377633692a41f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @ryliefrey/rylie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c20d975441437de82ae333f6255fd3375f1a2a2f7734eb9f9ea08082ebd8267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-muabavdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1525c96b7562c19afc37b88d9984affa38e204a0ead737910eb41722581499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf2df53495718caac97ddd0049d8d6a9eb115aa06d75a63d6f517eb407ad8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f8a1ae35fcbda324a68f37b2b7fc5617704644896a4381ccbaa56867b1c81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...