MAL-2025-173365 Malicious code in buta-fana-safa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b6cbcabc2897a936d63247db5af0d8051d0def9d1cbdc45659f97dd468727d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buyafu-mgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d0741207def77a4f46f3ba642e85dd3604146a44ebb89e072230dffcdf0505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-afasofavbagdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c6d46481a83389587cd80bc07b9f9cbb3d48bbc7e6af1539f2f9543ce97e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-uafaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d907d5cd10e4ca3e1cc8b1460e7f78b12a7f02c77245aa3a9b795d2b5dab5122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179389 Malicious code in zaskia-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c5e26288ed6e05bb15d411e9f2d094cc2063f9aefa89458212899cb6465999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176594 Malicious code in nuilva-avm-rvvuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafbbbda0de683ff7e5565751cf36ea3208eaf7a997b5b5d3c5fcf071acb07ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177339 Malicious code in poglymer-ogih-gagofgasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a14b419666ec0db9bca3e9f42c14b87cda293c08cad5a23dc8461973fe3d6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175404 Malicious code in kapvino-soni-farsacamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5b2029271db6a8308eebccf1baba93542f2dbaf9ecc6b454ff7ce96d9d6546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-matani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265aff1cbd86b6e75ac9a983fe418a95598757539b124dfb09908301c9d95b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-memekl-poldoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3c64b968e0c67f79c2c4872a266392763474a0be6f9f9ace97ad6ee65e6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172131 Malicious code in apasih-merahdd-pante (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bdd3d4c415b9a18d504ace1341a17b26bf98ed907dc945816bf0c4c2e489e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahmadfaiz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dba1c41a4bec6721309be147910ea5a77c2925311c5b31b36041129679e0603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171301 Malicious code in hassanescargot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7ae1496216f7bd238c067f19059ea75f54fb0059f0b1ec25af871bd1d8658d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faridbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349cd1d11a3baddb28c183fbf5dd721222d6a5f86044b92d3cb47b693fab0e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdullahqadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859834d5b1175b0afc7428815f8dcf0e547a28cb7676ee7dbbce6e4f440284f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239bb692b4808672babb34c787ed57148d562d87f05e5e1695a745a3263e36bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamli-luola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a21f9b1cc6c4d32a9475fd9f1b47d0d13805938b0390b752a04c71136073b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wfaadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb3f940ce7d2ed4683a78409a15e38ceaad5f6a6d11cc3d4e330bcbf8a0b6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-upmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36547600eae92429126e53ac613f191bc131def7b3eeb5cca253b6d3e18bfa40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8709a3bcaeff9a2bcbb7468727cfc96376cc9e78bba2cd38f18918b694cd20b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...