MAL-2025-174329 Malicious code in goodafin-nui-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f72a04b11bc7cf842e8c4e6e4dd339cf5651f6610698f15b69ad17bbccf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed858b064cecaba317074d11882b1b22a7a9612ac5f64b094056db593af10f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akkku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a202d93fea7d5321d8de6241394701d737576f7931e60c977862a12e502129f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173571 Malicious code in butanah-fipidssdfha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf56058eaa2dabeb6cb46f1965a0ccfecbaa36f61b976bfdc59178e4a1cc0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58481df28b83f91fbfe865c6b3140f69727a08b5316b32b2e53b87e67f40925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-agaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65606088704655e643b8ac706cee3897e996eb3a2fa4f400388e1cf9545736bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-retf-rdedd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9744e1151e298a14543e80029701deb47fb4deff4b15d9af6af5dc082f549da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-maayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80acf1e13e844c684b5f1547c4d015ca5a996289988791cbf41c059c7dbfd672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satf-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dd88136938720e586a9361bf7159b65d6a3a86dca2317dabed13f5522f77cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-darafaoanusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e4557772df85c8b5bf697fc891693ec8211af7fe471ab70bb4d436e60a938e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aagfhsfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59ff31d960a0c023ef55b5a2479243d24c972a75090ef0b99e0a987076e107d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sfoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94d68881314083001ee8bd15478132bb0300a86c99bdf363087653afd251056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17b4def2131ab3ac520fcb73490705c5edfe6f6ad6b9434520be734c5b19720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179036 Malicious code in terui-umuaraa1-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778776993e81f4d86306ffb604830830841e5749f093d918ae618531f0da8b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bb06e2b2adb6076fed137e4ae78fc0f65a0570cecfba9a0be7e8ee2a6bdd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174543 Malicious code in hakim-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e9010a82557beb6f7ed3ee3174fc9274018af61693deef2f4a9edfe038c4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kila-jakaiaoaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4438337601bfb4ba8d43e80762fe480d9540a88d662799774769f6e8e241dcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-ihdsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f11f21934ad74510e32bfed572f32a67715f58f5b7fed8fb9a880205c5c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177651 Malicious code in polymer-afajf-roifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9024102779c970a8b6b04431e18df759c8428c1c2fee725110779995c66e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173402 Malicious code in buta-fbobna-gdaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f6e95ffb8aa756651d2221fec2e388f43b9d7b9e368cc62b0a2c9a8733fd26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...