MAL-2025-173296 Malicious code in buta-faa-safa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af48019ff53b262b0cf24e045739ab2a1f7721c8a608d3f5b7b88db0fe4897fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamkiaianor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e40d594c17ce4602ba839338af3da834648f2f9b97b534a1dd5c5cb5b05fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690cfd867614b493377d3cbd23de8a8795379107d472dbd56a71a47ee6a386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anehh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6274c70175e05602b9dba9752535381a56101bf14876a1f150462666bf0a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippnoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77936093212ae90353284e914fc51570d4c688c27a7fd3b887d4b3d53b110c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagiuvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c270a1163d353292c9263d5aebed678f46c86d9c6fa8bcffd54c091b116fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9214268a4166248256a1e8935bd10a175fd84b7ec4cdaf49fa8dca7887ed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177922 Malicious code in polymer-datdfsadsid-ragadadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4889cfbf6bd04ddbd78d03762f8fc2bec457772771d4231a8cb49c2ad0dde41e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-na (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ea437ea6a1100ae8b6ce856228bf061adbb9cc546260836986e01035eda47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e533e4a39d29ce12cb72789d012e5bc3b1924ccef8277aad8b771a6cb5cb1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fed384f1319838c815d9ff0bb0dae22baccf9c31121d49b3141358a8e0ec7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336a0515e95635582049950f9e033463edc064f5aa5311e84d63a69020d089b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-refg-trus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0950caba705348d437eccd33f5974de78144884852dc5502d405fdd2b293c425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83aeffc5d4095e4eaf5a740e26441927c28fff4a78eb660976e84fcc7069a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c381652f53c82f8623c38eb74bc8aef5b44f81aba1ae89e31614ca04bac4f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusafasdagan-naut-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5edeb15e07c64a4650c158acc6782f1a3d8e243605e0d057fc2594383420a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-sgahsddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645ea4cd3ae454673d6671e51fc9edc945f596d448ecf85aab5fb7d1df12fbd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4e4908a72b45cad1fab25ae9cb951fba01385cd406cd496b7404952da940f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...