MAL-2025-173493 Malicious code in buta-fs0boiuna-gaaoif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659ba8170b8ca5a64e5f381dd0cacd00ce98a71b8d39297640ff436d707ae7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177539 Malicious code in poglymer-ogngh-amgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a1cfaa0efb49a4d749c5359c15335af3c2088f5f50c2a875c34ad821ecea2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176758 Malicious code in nuilva-dadre-ahkaosogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717d325f16400bd2e77168582c50abfdee8c435045eeb91c1a8eeaef87fa55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172706 Malicious code in abtengggg-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbc93d8b9857a83f1f785218ed3d1941a9ab9c1da7ddba6b62c5749c7b25c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76904493617489a581b85d16f79c848dc3e8589897d9aecb6fe10846e0c96d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177917 Malicious code in polymer-datdfadsid-raadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947b55e4b5cb71dc61d153dac0be67267117d244ae9a365c89af05ad068ff5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173532 Malicious code in butahu-asfui-dfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2deb5893a1fa7feb544f0ab841c4b27bb89143798d741df57a112a760201e593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avgof-agififadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3dfa4aff048a4bb6f75ddf01ddf64cc7cd388ebd1a698fd1468c52e0d7affb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognamh-afiaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956c423bdb5038c0c49ce7ca899141b30c2c309423e4cec1fb370fb5875657ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147e0f3aba7f6fd828532a49d4590dd17fbe27e008d5a79e49fa2c1261dfa0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasg-fgvanda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5171c7069219d84ccde02b9179eb27d6e61d89c70f91f6c106ad542e0ce356f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62668dec013e48f09a70bbbb74aa19a18c27f415b260a8ab9399c154ef409d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179101 Malicious code in thambi-vers-vesd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecc1bf28469fd3fe3738e28927021394b66c0c803eca95c349b866da422e6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177560 Malicious code in polymer-aavof-adadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa077e626f189f70ea376feafa9dd7407d85070ef660eefe0f50d7c0581c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-matsafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8bc040152dfd20d7334b428d8804fef743ac351fbc7b4737b29c142eb43689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diharurfay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e419b6dded021774919bf4fd1bca8aba79d3c15628390625cf11039c01a8603d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tumva-diad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f82813662b49605c7c975550360e7ab38d289c200115626e638c0e9f343443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jiaajouaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec05b7aa85573ee6bb2afb4ce4f8416e531a2a375114902941621562346a5f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178253 Malicious code in rindaman-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dbb996eda096b19884866bc6e7322f1dea32e72bc1de78ff1b5be9ff101847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175881 Malicious code in mahiu-sautg-iaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ae5dc5df7bfa3834bed02bb9cc63da1dbff272b95a8885cf62d95fcfb1ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...