MAL-2025-178792 Malicious code in tanura-saufai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5c8d5e0e2e02260dfd54e8bc5e02272d425785f1c7e675e6dc9d73fb23395d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172862 Malicious code in anak-jalanan-mdn7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfdd6ac7fd3296a99d7d27b6a2f0c7fc5b55c05d5c8a96d7cfbe92ebc1ca4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177820 Malicious code in polymer-avoadfifa-abohoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68246f984927f7bce790ac473c1def9baedbf1e6bc22b380234ab061ab879959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179384 Malicious code in zaskia-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc018302a1fbc22933a3c76a97a7f8248b8326701c30d629fdd213059cf2630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175277 Malicious code in kapvino-socvnvi-bodasbsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7c14b9f7084987e591715a2c9331bf601f441378a9466230fed8f8f54599da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179269 Malicious code in try-utudru-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853ac4f853d38287e282ea9cf3c5a7ff174f9e7f45d3c2d72b6c694a3fcf9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174357 Malicious code in goodafin-nuig-gibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15ebcb30fb7955e68a075d1789a11b93db04ef9e6b4e3d5806059f29e3f5bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-amafoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa92f61f59b913f3dfadbdfd5ede135b942c8871802c15a3806dc9b49626d62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manois-maidf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3855149741d466c7c52e0e3807ac32bf925e5658b0c1cb8763928d7b5c273679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a949e936101973237e88fa075705c3421f852baff96b6c33e1823414404326c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2ef1f436d1b9d9fb9bd4903e90af76c8cc31d5c3d1d446d549e4307118d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1602996782dbf58cc9fada840cebb7749160f3ad1dae0ae36ab38beb5c6481eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafunhgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289eeb113b8a73586006b89e652b7eaf95e1c641ec4e00fbd54d0ddd965bef43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-tafdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ff2cce3e14a1732fba910068b96b37a412a8b32f00794a4027f7e84151a755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd98d931d63618ae1d99df529255b5862bea427b71e1afe751d4210cf9206a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da596aaae81497d9a7546255ebfa2126c2b885dc836e8abd48c7a02b88b7735b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-favnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6293705564f1d09db55057f8984feaa9c9d0ef5332cb5af488ad441fe5d1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb265f7dde2b192e246d6023e4c6c8fec9cec781ecc92eb74957039582f95b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556183d340bc260eb89c2540197dbda9dfbd40f6b7e5b79cf8761de33c6aa9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...