MAL-2025-174777 Malicious code in hokage-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb35927b1bd1da8e8cf34fc5496d8a96ba04b3498453c5834f5b6ac284142ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179380 Malicious code in us-setya-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689984e4351fb193f70b7c0a51fdd2b804621220342dabd64d8390dd1f8973d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175450 Malicious code in kapvino-sovni-fsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf081dd41000368a4cdbe60ba06036137999dddd9760430386db313da49c4eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173636 Malicious code in butanaih-asfafi-dafafaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6dd16fe938f5048dfae44a195ec115232e77fab5c7144736b94dde14c42269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177724 Malicious code in polymer-afifa-sga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6807cdedaf5f8d79952e2775ad63ecf1abec64ec9b29f91fea09fe976bc30a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179321 Malicious code in unimna-safi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea09f21cd51de514a9c57b8b794e20a67d65cc3f0a94e27d922965478f77c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f641bb8f73128c2dfd9f035cf57e0385f1bab539570d5b2fb5d6e98dfd86cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3f9c1be6f833afed2a4f7fb3235b655d6c21c50a2f6dc8e17a698a7e10af48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf8ec09be0e30250d098dc4fd34266ffb17f7bba54518922730e9d5c72cb815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gidggaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16f11ca63f61f7e664dbcbab2db0a06aed9a175a653758274f8c7ecf8cefa12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682c36301f4c02b3f643d7b6368e9e90fab9cecd6a661847393d936bb527e856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-giafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80436e2c7e5c8d1af4b2717ce9ab789f9a6306625e1dfb4f3c9f7b51c2129f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-agaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c66f61c67f9f5918f764a14678c3db39658df7113181a87fe87f2377aab0b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunau-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244dae3c7e1297bda388f3d99c72c074eb178a207dca7f2900fb2575e737cb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80845458c29519f2e5c34b210c97e2e6d4feb95e05b882e0d9faca1dd44ac6fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-rsi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4c5ee14edafdebacb37993162db31fd547d9c7154063640faddf642cfdff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3477ddd3ad76b0578c4ef91c3b7b3d2f996354d776d0ac93b870656fc2d83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173422 Malicious code in buta-fioana-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc18883308f9db013a4f089f25a7dbe6ae7cfb49f2b41c0c33857da5abe718f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178949 Malicious code in teagod-rs3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c145c8858cba27fa5fd0ee83cab8be6f8f9bd60fe5079b1a294556bbf3cc0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177064 Malicious code in nuyar-adamr-adaasaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b7008b4340dd2a2d8f60c88df085cb043382c7869672bc8d158b669eec5dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...