MAL-2025-175279 Malicious code in kapvino-socvnvi-bofafanavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baa15ef04b936a2c487f116e81662f39c6634054018f218f65f717b1aeba064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176777 Malicious code in nuilva-dakdre-akogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50929131152442dc3531af794274958374307cc3293aa31ecd8b047fe900420b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafi-davatihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99495fcde25341899db35c61ae86ddefea7fe7b906537fdcc14f09ca73fffc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-iuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22562d153a87f2c380ff7fec544065162388e41373b465be54bc40a5e65dd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vres-butsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcf711c03c5da9012b06a944af39e4b54e5a7824f3aecc10584ecb9a1afff2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2140051e0f5074c3c46ae4cc2bdf7054401c3f86436df605331b8a66a3bf5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-rofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb1223a265548b006d730db8c73474ce78c0bde9f3927f507e009dcc14a0c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40365e5946a0e2ca61bb2da1f4ba285f5d78f86585ac91996a8804d71024eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudd-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51062813b0240b433da09c9b1bb61c1dffafb11e18e225aedef36b475c23d372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55981ceacbeaec2f05e0a5ed1e4ab28bec5629a5d9599f2332b4a80f717d379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267028f45697198f1ecd1a1b834d86968e4e543ded6229bb11a080b9864e4184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-teru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab1100061eefce4c1857931bb852f2a305a60d66939af1a249a22520ff0ebf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f757203abe245ac4729ba6570953ecc1f5f61157c1258ab983cc42b6ba34e63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-acuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c35c7e19c73919126ead8a0d0721412d379da255512877b5e93a5a2d3e5cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-test-uytd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c92f96a1dc379fa60747dff11ff44c83e44ae8a6ea7c5de7d5b7b502dc7aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-nafifaggfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ce15d63b4b925c7e34e834cbba959a12a1e31e1dbc479c6ef99d9ed5cfca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-dafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8f19dd6787e4d25c4198e1788bbf484c73cbee57fab8b8023ef434e153c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahf-radaod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8b20c08110522ce8e5311cc90c8f150eb6456758da66a7240ae0650ad282dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-boafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a642359ae4156e91c6a930e7b254ec438f420f63eba5660ac271194832c7b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177116 Malicious code in nuyar-amair-tbg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462b609dee75a373c9a605dbf03f0efd0282babc6c7427a850ae8cf045025281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...