MAL-2025-178592 Malicious code in sahunim-sati-fadafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53116f965d0d6dd4552d2dfae1c7b9fa0ff92e4ac670b6de280a65992f975613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173097 Malicious code in bafai-sunai-cum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03dc0c6da2a5cf58ffb5f303cef82efbff4b0dd4d85cf90184c55a5bc834442d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175076 Malicious code in kapino-samunvu-mucdivdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9211b373e1c4f4728d80b19f3e74bfa6c0d76fb30ff0cfca44bd1f7b2130b383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174626 Malicious code in hitachi-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47078113ec41443b7a259e156eab7e2b575d8c5cbb4c6a5114a109b77945b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175289 Malicious code in kapvino-socvnvi-bovu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d286f6b781ec8c37ef93874f7947189e6315fb0fc7e92235a24fff0f61e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173568 Malicious code in butanah-fipidsdfha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47297ab5af505eaf1ee35dba569edc4e26904dae64532a3271a09b2dfcd183e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177366 Malicious code in poglymer-ogihh-gaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edfb2ca32bb9aa6dd8ccbaad7b03786419eb06d4fd59c0c0bc8e60eae9fc24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46badb5c7afe8638f44e213f5e3ea952d80f2aae22de45834fb04b6e2b46c7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-ggfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda5b831d73dc200931c88c9ed1d2f2b49e153ccb989a2dfa8a5f318c65bb782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172752 Malicious code in akkkkkke-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660b725b6c1a7ed5fba92fca64b616e0f32da1341470ada105b19deb689996ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172634 Malicious code in @mipta1/r2sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63e205e0f63bf74e39b4396be288b4b8ed7f38f09f35c3bca39970211c2f8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659bfec906eb033e041da9f48caa179acb9cba15f6769a96eade486d2445194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-agagha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee45b77a0252ac19ddd4ef9320195d239752b2a3bee8478dde73f8b0affda600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipopha-opafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea08a0424363e641e978fd3851a04a70890eee916ea8ddcc140ff4ff4edca0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-saunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0931b0cd4652950637002ff9330a169fab793cfa8ebb0d07d77afc5b6a5214de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutafi-dagua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee82bb16bd1f2ca6b41b703ef45ab9915891bec6d39f181dd5313f976797b99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-imiaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf48c28bc97688f930901c1cdfb2193c61d83b737b40c85f271f0582c07191c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-minfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dc2e2ae5bdd6f372e81a23ce9a583f7e3f633e034f0a627e462dfc0beba72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff19da5a13803fad59e3e03aaadedf40e133891761b4a8d20a205f94f4808d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-suif-dafungai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63fcd348580b05eacfa09ee883d7a4ff3b490f5213757db78e78af97b3889b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...