MAL-2025-178772 Malicious code in tanufahuir-sofai-dugot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd10d49ab30c25a932f86494b9d3470319662153fe5aeae00afaf724078ca6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173071 Malicious code in awaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c579c5d5164a65ab6d538a37f1c7bb10a1aa30ff8ac82fbb4df4dce75c9fd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177417 Malicious code in poglymer-ogmimh-avigpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ab65a83af00a5567026a3deb2770180c139369b5d241e1f958485dc24ffe55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173742 Malicious code in butry-butrr-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263c31de90760af24c5795fc865c51de4e7e990784b7d9ea6739d24e594de204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175552 Malicious code in koko-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a18b323e376365dfe492ae79e945d46703be48b0abf3ffed46722e2a120daad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174154 Malicious code in godi-tua-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c558fb735dd5c78cfc29a6d2db816e9b6b5a9570026ce35b7a44135346cc7585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173174 Malicious code in buis-manuiais-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c0328ebe14766ee0836dd9ef3b6afc63bc4a4779813c31be65206a04e5a6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176210 Malicious code in munafa-saif-cagus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d772d259f06ef8435534bfcc9d647d6633383606434c19db2f113c8654056515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172793 Malicious code in alvino-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5624797682154a89c0c47f92e1c433d07b19e61469c41a8751dc7a1e00ecd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174579 Malicious code in haritono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a0515e95635582049950f9e033463edc064f5aa5311e84d63a69020d089b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177308 Malicious code in poglymer-ogih-afimaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e10fe947e70ae93f9a6a36b7b80085e8bd8f2ffc4813b9dd7a09721cbe33a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177134 Malicious code in nuyar-da-raatao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c64de3e02013143a974393162b86c070004a7aec91eab21690b199e343b7b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177389 Malicious code in poglymer-ogmih-afiafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfdf62bd2d08c6a6d58b61bb2b24f0e9a360c2562b1d9aa1d5e8e4f13338df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175502 Malicious code in kiki-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e1f28859e892f2f16c32ca86a85f0add978f99a686266d880b8bbcf38d8fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175066 Malicious code in kapino-samnvu-ubdvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c21076ad4c27688642fe83007e287a3b6e9eeeb10aeb05e47a6ed9674eb2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173073 Malicious code in awaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682c36301f4c02b3f643d7b6368e9e90fab9cecd6a661847393d936bb527e856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174559 Malicious code in haritono-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdb4d787cbe00409b48d9c3101226c8937befd3ef122a3c7658b1a15645fd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-daida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90901f1ae44996fbe67a6efaa1fb825b6756f45fa751bd36f5ae68f0cd75435a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055212361d7434b48e16a99107cb5990a40d5cf34d345ae7f533f55b6a09c01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/esdsras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac5d78566a2584bca860e34775024486c14a65a86cef77acd75ed49bfac9a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...