MAL-2025-180661 Malicious code in teate-thy-sonic-lovpik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6ec4e576d9c6001bb12fcc82163ceacb1ffe56ed322008d43a433a5dea5b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hds-mafad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a894d5f1723b48944ed89897d7e7e4827e40de6a6027d53575cd6342870d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imunasggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68962eab62aac258bf168456be1f64f7fcaf56d6c7620aed2ba3035ae1abeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaur-msdagfidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c23d4888f759f2966c05ed2eb1c4569b43c1b35f03ecf8dcab9ccba9602b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-tqbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468cd5623f1ddca4aa5bf5d5e02aa6e35a4e29c31f4183f52210a801bee59bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahf-ra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2521eb6b1fff8abf591d9ea6b1f3ea845fbaf5b4896c45a410e17b0ebe15233b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d7a3766f92b0221df74bd29da935ff7ab167490393d01357ced7199053aa2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogogadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4044b7bb980e0da5239e56dcedae7c8db653f5320f65d7cbd6f94d3b91e5f86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9ea7549cabcb4c96c584f324fbab66f2f24747d86ad8073df9f743bc26017a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-vusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8087075390bedbee654c5121f2239308b4224955df98289952446bc4cd5469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-duuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af4245640dd9680a6b8f8ee9afe46facbef530c79f308a982c669526939cba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-saiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2679098d5eaf7411734c5d9de81ab57eafd86cb76a450c98ff1baa1e48b73e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yundik-butd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdac1269a83965d40af8a188594a6c7e3166a20dcb5afb605d4e662a3746b506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-utuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242d07fe076e6763b7f431becc52ba8bac8fbd06567194b811ebf6bb5f68e046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusafaia-nusafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a43d6ab5031baa05c2e5cdc5a15e87f242de6876319585db9a9db3808516f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipidsdfha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47297ab5af505eaf1ee35dba569edc4e26904dae64532a3271a09b2dfcd183e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agafafagmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2022c40274deb78a6bd93c609957e6db660491c3d74112d6e8d5da6b84adc6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176001 Malicious code in miands-nurdat-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73a27a3addb135d3eed59f81482e5083b3c2e3fb4bf73dd1a32ea80e5f282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177703 Malicious code in polymer-afia-gobafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 472c175e3d7e79e4b7f00d06f91ba3b464a24db74676381198b7334fabd2acfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176869 Malicious code in nuilva-vmiam-ravfonasiabsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d30dae5f1d0db4f566c03f3163d54d2407b2ede222b88c995daefaa2d78eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...