MAL-2025-174721 Malicious code in hitachi-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949ef628e2f0ec13e5415fe3bbd75a4fed2d302229f1d9de422ec5f7f8a0872e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172969 Malicious code in anidata-hopanud-mafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c60f892bd912ac7f93b3631109eca5ecf685e088b4a511ce2ef09cf047eb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7f0de4a594431a449fe1e8c2ec5dbfda1b72ad791130a2f2f0c98c788340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b020985c9065879070afba41cbbe014f30aeabb022522a51fabdfa050534c2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanuria-safafai-daufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01067980a66b4082a3da5fcb4722cb214f38cb20d1c736db01cb3ab3b689978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ad71113d08d3ff352b13d10631fe5f4ca4a366a6b7806934a20e48eb1ee194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/r2sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63e205e0f63bf74e39b4396be288b4b8ed7f38f09f35c3bca39970211c2f8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satigoifagof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eacbe662978dff56871032454ea9faa9b6d20bffc080174c5072beee2946c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abehh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e38198c5f96e5a41e554a21a04c5a91012c0018f0eabf5644cdad2b3a30bf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-ersusi-nutriom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082df91ea2c667ba70f30bf88a81b0d73ba6c3a78f49f233cd133b8a591b3402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miaandss-nutr-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441de30ad6cf6ee5d799185837078c3ce071da22fa1038f49b7ac26c43cb7664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nudanidsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a678f47b0e48ea0044418e4d08285648e5e32d0210c9198d15513fdddaa692b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cd7b622e53299618726bbb7711e4f062036006ec0f60a42aad6cefc6fed04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-ffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97a50bdfee23df919955b681c5e564d849a5629f5e523f3f1cd2aa9a6fb24ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanifavvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51173918a99f29385597bf8a2ea5f7dc6a8f6ab3e6f86e22acbdd3320dbb99db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527ac0cb63400fcab46d9c66d36a0d90f1ffd7d9ed1e519d7ebde78521a7bc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-namaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2d29506388f22f419906b60d4a0ac900e45c6b4809bf8dfc5dc95e15f32e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-agajafgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fce351e723f6d54497c75f2d381d8f706e397606c6b589feab1beb53aab9f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-tabigafidf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488d10c5c65d927556902777daa4ddafa05d5d2a69b6795de1e162523e1568c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-yusaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaf40591a53da27e654ff0033e6d1056704d20a98cc469e70c87c8a659419a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...