Malicious code in sumpel-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0ab6cbbe088003eacd39f6b9c6c1f9787a3d95023e1a9a6d449ed38108f45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-mao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756fd26bf8c68dd8a692a16cb1ac7f3da0994bf78b9c0e9f9752595e39d29b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutiayanu-ganofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7875e917b80f15d55fad5112d285f68934a6523ba0e69a3f04666c30cb1b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-sgasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a793869be28a6a714264f0334318f2cd5ab15910c488868adc340c32f6b07558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de69e4110aae83bd5eef074ed9296c0941c22e6b9a71542e95c9a1b2decae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-rest-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc6a5cc1d2220e4c74e58ca53a905040d86e3a4f1233d12d621f2eee3b03f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-oagaffgfafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9a21123728c32df13aab73e53f9bd8ca342b8f98c09bf88560550aa1e3c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avafifa-fagssagbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e356ea5bf5917365679cec6a2ab568333856b40ae2552b882be50fa97ded6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigg-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43c6fa44b69ef54dcb2f6e7d98ef3e88f466f7712b6889704b3a66a3d3999d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a33ecc489d486f466e37401162f17aab8a595a2f81e98849ce014e8789588f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dsgs-trds-trud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55590fdf35faa024c7ca46b46e25c3852cd3b582271cd0054b961c2139293798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfigasdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a04f38d6f409ec550711418b5897f18f1658926a2d43aac13cbe6c77af850b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafui-datajufahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6ebc335a6aeb3822f84a238515c2746c1737c4c151a6a2fd6fac0c3754074d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ba3f0cf85371a93ebb39bf9e079a25e2453cd0c3128861a89a58705a5cabc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7e43ce58fb3cc4971e6cdcea4482255752e892c5b7d9aa6d59bea314eb5432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adarafudia-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c54df64237be2d1e51321dc8ae48d3fccb7449dc5c4b476b0d364219536d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jiaajoualai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caadf6ade5da449bedae5def2be5ba15d14e4a7a7454d86aafab39236eed4ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-fnfdosgsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d3b54b4f5ed2dfb8b53fbf05a93407c541ec7e49b27f8b4b5488b24dadcab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favurafant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96e62dad0d88c2afe1cf661b2f2730cb46f15c8e9ec4569158fac32f2430018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172914 Malicious code in anidata-hadits-risadipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062a9d7d9a8a201acec0d01a2725be1a96f07729b9c7d7ad4d27aa0009b677bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...