MAL-2025-178769 Malicious code in tanufahuir-sofai-dugofat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d3518277d97a58f07da8780bbccf2b6684f8478f7a233230322a1862157526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178177 Malicious code in rindaman-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a83d2af1e99dc9466ea08886cc8137d586fef6f4129e207d6a13058914e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175423 Malicious code in kapvino-soni-fuvdavioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359950ab447d2130f9e0e4567e0cf35f8bc7070e32e88c760c3b6d90d3e3f0ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173754 Malicious code in butry-mutry-poiy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91082ac3cae4e474f8c6408a01604ba6db6eaf844c866d4a68b44df118b55881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176542 Malicious code in nokire-tanjiro7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be294550be7a10250947e7eea4c48a0b21070d31c1f8b8d7ace97e594921c4be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176406 Malicious code in nokire-nakao16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda320dcf228623ff1a7925832f5e4e41ceed6572e70fe1a3429ebb932c67f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173761 Malicious code in butry-mutyu-wer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37546b56a6e767f2df39fe3cf3b1de9a648e178c2dc0523c6a09810a737237f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810bb22a3585f9efff4bd077d497271517961b3e7ebc3d409ee096aad47b33bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-reyta-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c646a10c2247f5959c610a20de7ca489778cfa1da01a9e452d90e2666a10999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fedbb5d5c662b341e43b1be0ccf84e11fcdb8c41f0910a23769949ce3e5651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9d996224353f6e1778107f719c0024707f240d65d28412befada48360fa7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-nalika4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55986bb9efff8298f9538e62663ddf3be88d7167a57f2565bfa84abe55b104f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-roffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08809ef594a1cdf47182a5eed82f8a4fba938870524c3a007e4a062247ee1044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiatua-nutuyagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5596fcc0d2e192121b515411e781da3fd196b431d4007655615448e2f6e98878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886a0d899e3bf2372d609741b120c31767c9c6b819194c85f1932523169169d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-iaaugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf0bd643e011b01da4b4d00cbdbe52ca59c25e2ea311edb7d6641eb69cadf99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-haldi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3365faa3f7efc76402718a8ba75e06696526b0c7bbcd2b5adbaa205396d14c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf097a3452cbe301c446e679c6a4bb66f15b89d795d4633c5bcbdffd9462fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farivavadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d26df1e1e742d7655331ffb968dd907870ac1bda890857d912e7e378ce7cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...