MAL-2025-177088 Malicious code in nuyar-adarafudi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f822eada82571b13d5c0efe93382fbc35eaa77e25cec3628dc17d26fb8151b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177076 Malicious code in nuyar-adar-bidu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec48b299fc78fe965ed14b71095fa3a992fa36e671a954e4594f39876a06e34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172879 Malicious code in ananda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a409b0910ae4cc8f0b9a04387e391a7b7a8e3f4dfe9df43188ee92c7233d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174698 Malicious code in hitachi-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dde271a62d8a0be2a8317a66afecaa89935ca2c878864b6b45f9cc578f2b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178312 Malicious code in riya-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe9ebc76853d02c4aa9575bf529a7a4fdab61451a89d9870b2df25d2aea95ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173659 Malicious code in butanaih-asfi-daurufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adee7ff28421b56a361ab39559ae98ee972c2b899baf9a6fde47cd434c62c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d12c359842dfac1a3d4fca3922ab0315b09b0bb686123da3bd0debf5b4b5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711ed986a89e64b4100170578414cf3bfc5ab77fddde425069c472522a5b9d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175533 Malicious code in kim-sohyun-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cb5b64113ab869583e87ebb189eb75513270c25e6056eec5d041f93ae37b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173827 Malicious code in digo-kaism-liamkiaayianor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1a1a8026bd1dd9d4e52a9011349978a992687a99ad363d3d24f0e367dc0461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174601 Malicious code in haruni-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f298e0a141a5e570d1983d9ded0e2edea52f5ba0dd36729a53daa24bef7be58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461040528feb7929f516670438a4ec83959bced0e61fc285d9028a3189a43cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satsag-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1de466ad9238bb4c890446244ca87e23b3b9ddfce25d7ba502ff596c497c61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-terd-reft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997d07571e231fe1843408b2a298cce4bd3fcce3cca65db21cf21dedcb4476f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopanud-mafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3790d7abef5c1efc7381169401fe24687aa7c80eeba68cb275507d6524ce6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-racing2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b8094e5ba133b10858afe5e1c122a4ff2e082d992c443d39c1c75cf159101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca3ebfc0ba10647bac2356636b19aee71cae59c9cb55dca9931df6954765830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bf3ab62ef408aad58a2ba9277906f55b37f3289df8afcb3bbbac8bc8439d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-daauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8336b4e48823a27153e9ca371749d188992896ce8e28cf0d446a706252559688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...