MAL-2025-175961 Malicious code in manadsi-saduda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8151e0d29533a2040eb4e43b07f11ec5ecdd71b3338fd66bf6c37d9d9c3a6a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172677 Malicious code in abaah-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5762ccb3a5ff1dd79564adddd057d8586037b2ce3bd77eb735e3af21a5fc30c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173548 Malicious code in butahu-asfui-duiufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08730ded02541b5c84af44a49e74e6629d8b574a45574da93215f1b273ed73f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuidais-btayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010731b92fe2357c59a735fdf905106d294b81aefb4579acad49cee53481fb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af52cfdfdc017263b39290c0e2433b7a7e7795772b3550fe02999cd8ded95d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173287 Malicious code in buis-suninna-mbaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f166055f85adc3e931c989258e1f649953cc1909d0f7b97b95589d9956fe5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178330 Malicious code in riya-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3286c093623fa187015304651c1171f7daf657f9ff5b5930638cca881aac1b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177404 Malicious code in poglymer-ogmimh-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3a45d0ca0d783b4bfb780ad04c5e9c4188dc27cd23e3477ff34dd5ede755e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-baidyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d0a48f4434b5e0129e78cd0d456512a2121dc3a6ca2347e3538ba93c86aac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-faugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73d3fdecedf674ed4ff6a05543e36e7fc7de6be01cf2fc8106fc71a817c8c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoalamaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fbbc7a2ce2c757f793b142a78b87a35a0b8a4b70eaf58fad3f3c66c3f61492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vres-butsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcf711c03c5da9012b06a944af39e4b54e5a7824f3aecc10584ecb9a1afff2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-musfngi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb09c2e43588785892ebe376a42ca7d5a63053e7b3665c11bc7cba1ab984ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf081dd41000368a4cdbe60ba06036137999dddd9760430386db313da49c4eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271130b1aedd5d21f7c2554f62ba692e5e5094de3735ad94e23504de9dd5f25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abaah-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5762ccb3a5ff1dd79564adddd057d8586037b2ce3bd77eb735e3af21a5fc30c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc904ef842c166a9c66c80c3cc7fbefecf7e869674ed5778dafa62823db499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuidaais-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5324a0657b1a36bc7a6013840e8ccdfacb9bd54e29b2e15c0f6f2565d093ef64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4fd4b9b1fb6eac49a4808c74ba9daece8be0478d080719370ad186c08e290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a949e936101973237e88fa075705c3421f852baff96b6c33e1823414404326c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...