MAL-2025-173944 Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177802 Malicious code in polymer-avfifa-fagsabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2b9387e708ae94fc2321d8886cd049e5dc2359e22b7b92abc855a7fe5838b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178273 Malicious code in rintono-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160f111b52000f951becc8ce6146731dfaa3a69a538928eedbc0de79774df410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177174 Malicious code in nuyar-ida-radatidd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8546986b07929634ebba78dcca018f2a4e35bf8d337091acd338f663bbbdd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173591 Malicious code in butanah-fipopha-hafufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295a91161cb8a11c7452c3649a3c576a28043166056086bf68486aa037aaf302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179250 Malicious code in tray-upozp-namaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef19986e962687174a52b80663cd1460794afcb70235a9f3e6c9b71d39b5465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnnna-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2521cb09d8fd95014d7452287059dcddd92a5ae01c87d7b0968efb7326c2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bf3ab62ef408aad58a2ba9277906f55b37f3289df8afcb3bbbac8bc8439d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f563b0bd7e5b0799a16fcc7a7ff62fc087398919af8ec2e9c1c488cc143dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173199 Malicious code in buis-masi-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e61ad4a33332aee70dd0ee622f6c6b29952f61434628d034c9f14e888c07d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172847 Malicious code in anak-jalanan-mdn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d127e7bd0f6675f98410f6fca6fd66a0e32b8169d021580a0fdd1dd772aca33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5d28bb6420f9f0e144ac494a7fb8e06e93be70fb965a329d89eca086b24782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176363 Malicious code in nokire-kushina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ffaeaf67256d3665e2c948e2037a5ab3f7bc9d18cff28899f9216d5544597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179267 Malicious code in try-utudru-mudty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1690e3a01b6c52c6055e88cbc2bd5ff2cb53a3539585e607861ee94be199fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177189 Malicious code in nuyar-mar-aifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3823c5f7c1e6f9d8b6c98da2115dd033dd0a0f8e80263d69b67f8939e873b2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174466 Malicious code in goodain-nusia-nui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed83ca7c5959d78adef52f88c41c4b43dd9623214640b9182b9441e11d2ea51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178775 Malicious code in tanufahuir-sofai-duguat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3f2baa8cd971a9bdde119735f5c3077e6c0ff6c83253d70b4279f4680e0740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuga-ivabainfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45bd25471b8334d42528363eb4b2ff4fa007f1fbfa21e7b2551c090a15e7679e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-sufaufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c66fce9e30fb77f02447758fc3a7606b1046b77e33426c91611eebd2bb64258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifagigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b82de9e72f3021b71e6cc1f6cfb2f445e70238d4739ee845aa4f96751faacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...