MAL-2025-175846 Malicious code in lia-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778946e74d17d07a62c6e841f0893b69eee61d83b1210cd1990242b20f364db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174746 Malicious code in hokage-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3f9c1be6f833afed2a4f7fb3235b655d6c21c50a2f6dc8e17a698a7e10af48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173491 Malicious code in buta-fs0boiuna-gaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4797eb0a1a773c2bd83c6983b456430beee67a29b775bd847d415cd523f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175867 Malicious code in lia-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa96aa47a258dc918d8d52a547e9df7432b844b5266982ddaf37456bae9ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173452 Malicious code in buta-fipofa-iuahfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01020bae7607dafae7f7c2ec811b2880c712667f32144797cc65917edcdd1d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178987 Malicious code in tearich-new5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aac5c1933433dd26f2730b501c93da3724352457662db6c49d51386a6286360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176985 Malicious code in nutraa-nutr-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae23211f8bee219f6193015edb59a59970334b01d55b5b5b5ddffb6d8ff4063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173563 Malicious code in butanah-fipafha-hafuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f067751a4603f0a8e3734242e5db705d4fe6b505024e1020a9d05ecfc04dcc6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58481df28b83f91fbfe865c6b3140f69727a08b5316b32b2e53b87e67f40925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a811cb7be5359cc367037c55d768360f2238f6281cbeac6f42e30864a96b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b79c895dc0b338750b4ed2b2874871c3aac62fb04e0ff9451275e94ae68330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c0bbb2a4731602c63c1e0fb3da63ece7c438a18c1d0e405d595b6e04757873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimana-satgub-naiunab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99213f89baf466b89d09bb002fd30e289934ee1653d71d0a8c6e703e5b480c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuidais-btyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97fcbfbe6452703e5f03a86aaa60dc6a82eabfbfb1f8e7fc23d21d0907708f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdii-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c632eb16a49e0936696f509f31bc1b8ce5ddbb6e39a625c5c2eba0005becf8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba19367cc433f9ce84094e7a3dae024498dc5ec2784e35bc2e54c06259aba6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaigna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c8730c458c4758493cca40185f4fc5dd25d3325c752a2cbfc4a8e3562dddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-goafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278144f5242cb2646164ed63a8ae9d4cef40edcda53a84863d3ffea20b43964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2381d00a7117cc3142bbe724c53b4998461f9de697ecc036a3080d60dbe3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivabaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3271ede40bb57fce1e1f7ded9f3f850af35722851dfdb266c386a01aaa7b1c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...