MAL-2025-173571 Malicious code in butanah-fipidssdfha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf56058eaa2dabeb6cb46f1965a0ccfecbaa36f61b976bfdc59178e4a1cc0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178178 Malicious code in rindaman-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a966981ad998b55e6e87d31dcf8d23cc861baad59f7a557d901708cbca0d6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173322 Malicious code in buta-fadg-vafsdfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15dd77b29a9952ab779f572588947638333155e671bb65b0226e0e3dc952e345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178698 Malicious code in sugoodaini-ngasa-abai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e039e295fa2cc30361b6897e8a5b202e467b0acfe121ed48b5c2982d20d9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175561 Malicious code in ksai-ka-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5547cf1d26160cd1ea6c9e187ce6cace523bd4d3d72e3a03cb53af11e8fe1569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175052 Malicious code in kaka-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c7b7a454dfa700cfa8df483099dad7281d4f94c4426df38f6738a88521e47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-ivioababga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b5b84d917c9121603089648c51bdac978c28c1aed0a908e6bc1b980306641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-suif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0418809c2f49a06e0d05ae1a4b4cd9172dee81aa6ea1473efe91106c3a3eb43c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippoa-inaoufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee170236a8c4d3ffff13661a55f2287f4ae6740c217a1741930bc6ad28d1241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomagiabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0a257f9df1ff26c778c28c1588e408ba61912e8d15227eddbaac8c6c7cbcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in truay-ozp-putrd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ffe50eb9e52408360c9a1b21eea9894ce580d3ef0cebd957a561e2bbf80b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fb2b7ed28f1a3884fa63dc342221d63aff4600fd6aef0c39d207d5c23366b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-anga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240897e6bdc4d665ee24db9e43be910b027af15f7d4fef70b7c2ed2965372906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infaruduit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9682a95a841bfcd2baa27990bd1bac09b5acf4ec4329e09211f0852ccaf89bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanabadus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978414974e4169417aad6fedfc026399730f03c935d25077ae6feef7591d52d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176156 Malicious code in miusafasdan-fafadfuds-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec05eecd275c518c35846b75cd2389179ad3c4d394dde5da0162465b80a517a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178145 Malicious code in polymer-tyud-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f36b404ae3c434d391f9f338c51be9a5aa4a0aea91053c5d5ac7d9640aa486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176906 Malicious code in nuragi-sutu-gaaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3458ac9421392a568a4fb33c9151f595bf0352c24f70e36e53dd1b098eceddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172813 Malicious code in ana-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd632e820837b776208c045812dc3d4830245590cc487e4d1c0f0a79cd865cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173386 Malicious code in buta-fbna-gafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701d043ed3ab1908a508b2e984cc08c758533ff6dd7e7173b3ac242b09b3711f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...