MAL-2025-179639 Malicious code in kisut-afncg-avafeudcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e211370c45f561a92023b02db59bc4e78e15b5019c9e5aa43da2474ef8ab47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180916 Malicious code in teate-thy-sonic-rupmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbb14c9ad8a1c579845a015c89df787ae7d2fdab0acf4d4e26f6e24bcd2e619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97861d577f11fd6c478ce919ccd412caf0f9118c86b51bb19a14826c58fbb8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afiamaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10f6d7ecb93fc98fcdbc432b1372f710efbfcad9416253455da7b68e3933dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-nuyag-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c795c5b94f29012c3c42e8846bba988b04d64af94e7b76df0b0e47e6fc7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-ji-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9507c6b14d7900f8a3f91482b117a4dba48d5bfc34fb06e0a1039f02a33795ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunasgsbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b439c48e7422c2f2e2fe4f0af313e931526cd9f9f929c93c99b81c023c2694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gdoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376116334a2b441b714046cfb08b51392c74f53fe45225a32b91f35966bf5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cad999f66e7c49a76732ec586a0c25b645ea73f1e8d5b751a66025aa72dec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-gidgaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846163e4d38b4cbf10d480c241b13c8563fbeb5792a493d6675a6eb3e37c9b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-afai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9471edc28d52c15f0ec9003fd2d6c49522f3ee445c66b644b7cdba7be0856b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9d928461b6d1b07fa093dd2e8bc7acd69904c64d7aa4c1574110fe5f3df79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179197 Malicious code in traay-tusdy-tryu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0208bac5fb3af29fd6f61cb656a9ee265b6252b504286367bcc01ceeb1461731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176924 Malicious code in nurai-sutaif-danabuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914b353d7a397421cdebfb64bcd05535ce622d508d6e1772e63dca03e33e2f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175617 Malicious code in ksai-kil-kaoakoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c1f3894f9d4993157aaca8007968ec0fb5f6a2f3a911ce8b841ce9c55baf22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174500 Malicious code in goodain-sunu-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1590b1a2f58293fff081ac348c9bae7757f462ca271efacd03cf3c94da590da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297b055cf4800510d8efcfbcb4d357c3c57efc3a2a2c67a41da87802c177d964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiun-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b00c841a844abe148415aab470adc61ef5b8df5e89b167f8871933cb265f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agshhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0ac6efb72690bf32e10b72eb4fda8bc79d500671b64851ac78055e4f80cce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-ffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f0c37710206109c5b6c2cd40e3fef0615ae168e3f9dad4afa3f376bd7f3742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...