MAL-2025-173672 Malicious code in butanaih-asfia-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cfbbed0d596eb7423edeed8830c288d06fb6240b2ee5ed79ec7fb7f14d7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172885 Malicious code in ananda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6572fccdcfc4051e4fc9f0a9f27859225b9f3e7787518d50c91f5d5961f5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173103 Malicious code in btuis-suinana-acabnas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593032655d88a20fe76933f326a6996dd1e5c0b42dde513ab5143e7b77a28e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176363 Malicious code in nokire-kushina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ffaeaf67256d3665e2c948e2037a5ab3f7bc9d18cff28899f9216d5544597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178728 Malicious code in sumpel-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8e229c716f0629655d4ce9b8351042036cc853d115e94cfbb8b43d76c29496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177280 Malicious code in poglymer-oghih-fifaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca3c95175411fb7ad5fcdabab75bda1da70fd5ab0c0a048f44723198aaff005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175645 Malicious code in ksai-kilota-ailoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd27783221458b32e526aef5d5cce99381b344ab41aa80d4fe225a414565ac8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176532 Malicious code in nokire-tanjiro43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da68bcc038af553b9c6be03c1495b5a57f40734c1f795c492ab1bde1fb1f9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176394 Malicious code in nokire-kushiya5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec232a22d981fa87b36cec5d47017650b66157d49be76f98993a5a6322a4671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174744 Malicious code in hokage-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a0695e6f7f07aacd63d02e3ff47eef6788887be242ee04c35cbe197fd2845f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0548aaf752f114916bfbcf0ee17c8a07810be926e20688f3c520940ebb6086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a6e5d27d6d7c4dee5df04c3054b1fad0608567d1a377c43c9a9833c4e9f96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2ef1f436d1b9d9fb9bd4903e90af76c8cc31d5c3d1d446d549e4307118d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c50c9631c4da1ab18c750eaedcee0be6a2e82299dd1b98f3f4d56f653c0e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumavifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6145befd1f8e3146a0a7e757321e2b898b06cd29159122e0ce8e249228f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-adadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa077e626f189f70ea376feafa9dd7407d85070ef660eefe0f50d7c0581c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d9b8e346e0823cde1d4e03135ff174256db54b721bd5cc922ff5373924872d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9cdae23ec09a164bbf891535b81abfc5065cf76ece6336cbbfa90d41e61e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...