MAL-2025-175881 Malicious code in mahiu-sautg-iaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ae5dc5df7bfa3834bed02bb9cc63da1dbff272b95a8885cf62d95fcfb1ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178661 Malicious code in sgoodain-sanu-nubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e949fbafc81f1562231db782c75c58441a923ad5301cfe3e92ca15ff1f53274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174886 Malicious code in hunimiabai-satib-nbb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b077d06a440f3d04e337c7a83d22779ed00d22268b08d1a8a1dd6d03ae8ac92e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177857 Malicious code in polymer-avof-ahafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e24fe6c90dd3b2ee421ec3312d245de05bcc141c8260301681960f1099d6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-dafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a053e4c2408d5158a51334417e8aeb41698e2ea5ee6e5bd1b2d730279dad16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173117 Malicious code in budi-ko-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef026346f3cc5ef0d70334c73dfa1a78742983399b4758bb8d4ca6e172c95109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384852132e994a82ea5157fb0525dddb06a7b2209d98c482c04cdeea62295f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farivavavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5d570deae272dcae373a65dc256f780add71c0344e98d72869707e7c6d3311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173220 Malicious code in buis-masi-mafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd3b379d95888ae3856ba49aede882bdd8df5dbb05ee3b670c2667f05fe9243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175058 Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdf8e3cdfb1e84cc4d45496defdb0ec75eca6c5298ff74521fa8cbef3aefb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfuadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240225665644a32b73b9612a7616fa1577d6b46d125962efc55a8ea193b0165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a991f1e51d7d1016d81ae1d45ab4a0ce6b117afef8f48e1300a1e6a2af81bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-putr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243f1f495ef6c16ed71a53f69fe2436d6fc9fdfb61744f3f4bc05c34ab5730cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a880c44754ca5fd194d5b68117aeb794b72f3afc1a9a96ac911661687a62f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-good3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748e6868ebe308283ff062d8cc1e715eb3ca0c789dc4cceca1d48d2ea9e6443c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134e9a00b24dfdbf2aa577a8731007a3a8cda01630519646c971b34562b08af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b77f64cad393e5cd8ac7b4a255dda4d928809a60ffc23195ef740a21b33169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaf-radod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66ef4dd964b2bce0572526783a58c4a850d9c4e06f1e86345f41c72f1d509d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...