MAL-2025-179192 Malicious code in traay-patri-pans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5544490241808843881a889bdccfca7338d2a6d18c6f21475d2e49dc7a396b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176222 Malicious code in munuafai-sufaniffi-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95589de866c6fc40d78cfd32761574f53c1637009a9c195181e44add64e44dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179082 Malicious code in thambi-resdt-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd5f1c9d3694ba4788db538f942b317903dd8d6fd7956d9a04e3e0961998189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175693 Malicious code in kupaio-kia-jakafasfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2671a10c0c9d1f8d03c24ebe1d23692b89cf4a75ad1fd1e839aaf8607e4977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaana-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0314c7e82d73cbd6d812e1ccf76cda5329383b53140a93b69097eb0c5cfd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-manuidas-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad8fea3188a036eda418b65e0d6afef456693b5933d5c25c85d81a64ad5c530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5e652ae8a6d23765ebd7e7bb439c6a7557e2b31795261e92bf85082fb72990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-gidaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5d99897d73ba462aee8ac3640ef511061b98aa79f839e4162772f6622940df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-mayasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee72b65b527166e564e48594ff260b0455de8fb478db99574ed94a656668bbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-suanai-cauabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b255451a41d12a94475f46851b0712a638e209012c5c3b659fd4321656881b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6593b8aaf4c49c8332a544e4a92d6963965cf08d48fdf1a592d61349c69c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35cbabff4da158dd193065b31f990eaa293d5af5fa4df441fc5ff60455b0d7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-fagvguaganda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2991aeb64975bfd24825935d34c2a24cc8f4551eff742f18eb7c2988cf7c2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socnvi-boasvobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0337761128db30040f1e04a7ca5ab5644d3f9471109f29620aced66aef0d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-vsgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18eadd5a4a447830798c5a645a3c68e9a50a38f5d454d0abfae599a40700468a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kais-ahakji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0164a942bb90b44e98241f5847367c9a71cb039d66fa9b2951c11146696f129a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-nafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12abe3dfa774ebaef1e11af244bc390adfb606f5b615151a229d981d75c10e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6848bf7aaa9afc8374cf6ffbdbaf977fc222b5d006404a0fa71f4f800b0ee97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-duiufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08730ded02541b5c84af44a49e74e6629d8b574a45574da93215f1b273ed73f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...