MAL-2025-179792 Malicious code in lookingan-jaja17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa83e70f85228de2e40503fd53595ea340ec853ed5f2f2a5a41f556249a0326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180092 Malicious code in teate-thy-py-petsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec23a1307a3c8d4503adf131f7a34a854f0ec43bea39a843844d8625f49da92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179568 Malicious code in anais-pappmoa-yamoiaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e43ba1a2d4ce38a1d43335c51f400b5ab2b91d8019107e86fd1b5ca0b065e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180895 Malicious code in teate-thy-sonic-rodras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5011c07d1bbdca4ecb43c572ee1aad91b5a522c8afeb17bcc4517a8dbbe9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3c6cbce0f832fba1fe0656e66c3354d6fb36c4fae70d1a1c0153088d76d457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imibafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dae3f73bfab21d3e4b0d873ec6c72e1ebc8a5b3f6f03a4b2bff865e8c84087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-maav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3be207c7660940f216b7f5f4ac02b7c381fdb976be5cdf15626fc983966329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abahhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a6afd348ff61af319d997f7cd0713ae2f6169f68226d19f3bc234e89cadecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-oadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b9d8dc2d01bb1fb878d740c98bc00b08c13ff325b0326422185a4b600b38d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-giaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981072f266b997da70c978b616a19ac77a3f66600d123454490b49af0ad34800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abahhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602e48849f1fcadd67cc936c1224f1c02b89d86597a80bc84a35d6db826190f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satf-anujafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e58bec6e50ca1a93230a6edb0f7bb711f179d8b5a6fa22ea1df659c3474de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e3eff0ff0d928ae84248e83783c99472f4b4d413fed65bbd55412fb5f59e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kimdjiwon-ersui-vert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b9b9dde179fff395f13df8fc0f740e84eac5b0efad1885ebab85a76a84e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaahga-agaaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d613dc56e81402c02aebc8accef6a9da23e5b7de961acad42c83cfcc6c829f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9471edc28d52c15f0ec9003fd2d6c49522f3ee445c66b644b7cdba7be0856b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-madivunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b9634db5b9691780b2d188e737ac8164c5988c4835bda7f056fad77a6c6636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-yust-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9ff7396a3cc74eb6883442c60566373d03beab968c6a5e661195925395b84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1622e9386f9acd3d43df9abe4ad40ce54bd292a9cb928a2258bd3e64f1298323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-ggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e5392d676eaebaeea4188c1a1c51075f6fb0a3ad52f10c56f534b9a4ce104b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...