MAL-2025-174451 Malicious code in goodain-nusaia-nubafatutai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e97ea3f4341b818dca83f30d071015e056c2f17080816db311afd7b626c9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bf3ab62ef408aad58a2ba9277906f55b37f3289df8afcb3bbbac8bc8439d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nnnnur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945c76ab0c57365cb3fd423636a07eb5868f002925ab93bdba324b9c4e2b83a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daujhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dddee2e014c6d12bcbdf3e4167393f4ae1b2501bfef24202f7a698fd1b6e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-razfbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cafa2cb260e56a94e64ce9a07c990c17d8a37b223084cdb69cb2aeedd797c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51300758fd6b77ddbd511ecbefd0c856f28490ce98c1b2b1372a3cc1ccdcc4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae301f0ebfebc8e3f2cc88299bf64ab020182445707f4dc1f25ac2f248bdd0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-ngoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9c2c9eaef071397eb7398cb7948cdaeeb9234994c72e99eb1426a246a3787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamnamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78133df4ee3af729499450b93eaaade90c0c5cdc0ffb7f3814c23dc608ddb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-inva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d6ae0d8d77abb00597a58515f1d19250aac06752da8c725f848d25b0963587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d34ddf6c7aff7ccdf6b5c216bf7467244ae9808a418545f1acc6cb2e386797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297de9d103d10986066438c9fcf87249bb2472ce4ace25e96ee3ced1b1b2234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55814364a30d90f33ef6b22d7b30af31fa5ecd22833671837fa8573679c26dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah16-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fadfeed743560539da679410c1b0973d77d60427953be26db420f00d2135df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafi-caaufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab617454e40cb9dd489ce6195e3331d70cc40b3b149805fc5d05a17bdcbf3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c381652f53c82f8623c38eb74bc8aef5b44f81aba1ae89e31614ca04bac4f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176438 Malicious code in nokire-nakao45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcff7706c0df7eb5f3e3ae84e63cbdd8a7ded9f547208c15bee3608bf257303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177013 Malicious code in nuyar-adadar-biuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f61cd67c96c8c795346eb0b3904319c1b4e7b076fdddc80c0cc6575a0b898a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176376 Malicious code in nokire-kushina7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1a2579eae030d3c0076d9220d828bf0f51fe2e2ccb2c323df5736cd5017b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173863 Malicious code in diva-banbfo-imufagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988bbbffbb034937521bb05396bfb8335a1b6fb645e6e66302e383a8d7f423d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...