MAL-2025-175719 Malicious code in kupaio-kula-joi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badcf6b31e2e9b2a5a34cf345f62d8338f114154c490de31af15c3f7e8a75da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177113 Malicious code in nuyar-amair-taqaaibg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd32994998ff139ba6bd9a9aa28233af171cc7a505887e2dab2c5d86faa6c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173736 Malicious code in butray-mutio-putyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e816c65a5dc28d8b78dcfa7d2a48c018178a4d56663bf6c981712177fcdf98d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177200 Malicious code in poglymer-ogaguh-han (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90568b04861f412989ae16400d545c10bd5cc0b87baeb2269ee1959ec6519c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175149 Malicious code in kapvino-soadffi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb2f17b38d69b92f902e7e738f4dc2183646f5f50e90260369b53ebc0b7ff4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176099 Malicious code in miftah-mipta4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41aae59022ba4bd19d7b47a433c6fffff653a01aaa044cd81c51ae810d603739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176213 Malicious code in munuafai-safnif-cafguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3304f7f6ab04bfb427bb87a0b3387a28bb87e19bb5215d4e55fc961afc22bb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174946 Malicious code in inul-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b475bd43ff1dfdedd4e499274f298d1ac473554f2bfb02e575018bd5d3fc4479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-manahayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9f677fa014ad88c2fbeb9adb946d5b0a316d0826e07543ba1352e1b5c54985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d82fe0925755e8153d04322bec697ecffe8d30017089f6d66e1c40c846310a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-haulid-mubdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0824c29ebea73303c7f68a40ff906e85368f69307ceabcef2ffd03be2a79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-rofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e78d564178c624697220d381bf2ba996dd8ff3e0078bd713c422e92f55d1f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2713430008adb83334120c3583238c076e52c3458453f7afd39c69c49348f56d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-daganyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279ccf7dc259d54a2d09651578f2799d0c09a36a1a147d5ef8c5c1d73374e044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad181e027a0681f11e67cde0c9e5d5f2ec4176855d1d1fccddd767cf5810e2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-init-tesas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7234d4995ba75f1a5aed970bf54883653fa83934fa7262102376d3235de4e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab94f28224fbc1fe2bc06c3cd73ba7ceacf6213d21dc2d0cd37adc4538dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8303d412d79ec3fb8bde52709e97032f8b401a265fd902093b1d876dc7d30861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aksogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e554eaffdae5c0aa313702159d6c1e3e1b6ade902ca27b0797a6675a432ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...