MAL-2025-175811 Malicious code in kupaio-ulokia-jakafafofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae176fe2fb06b65b0fc0c9517f180bdec7c183671e079d59becb46ad47aab01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178952 Malicious code in teagod-rs6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3aa1bfae364f7794d67e2312c9f08eb8153fa078062a545de7097753237f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-bn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe42b1efab189103010b46f51ca669b8da6f0ccbc426cf09c52c78b7caff0808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-aooanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c388eef5bcd2f436701ed89ddfb3140e47b419b9adfbf5cced296aebb355cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb9852bfe582a1f407040f3c2a668d59253891e7562040f72327916abda1a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutayu-gaifg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24f59c56a1d66c6ff4b649efc53e402f4405140f38044d141564c0a16ab16fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infaruduit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9682a95a841bfcd2baa27990bd1bac09b5acf4ec4329e09211f0852ccaf89bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-abainafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d00b72a48d32fb6463b755bb21d981373799cc45ad49c27136c2db9736a907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-nuiya-gif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8759cd3008d46d8c44795d4618cf3bb0cc2a76c35023997659cfc9d9486686b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jalalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7678b5fddbe821a1bf32ef99597a430f07447b2392d8f657ce58d7266bd40d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-agisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8069005a84ea9426fdf9b0ab7f25359c6c22d470dbabde24b75cd2b63c9f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ecb1296ef2ea83f548d479c58d0bc2df1ecefe888e0e81780f35cad71db5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-iutu-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19edf1c695aed7dfc4ffa333d0c0e102fedfe39031bcbb14dca2e19141bc620f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakafofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00eb70547c548fee38aed00f83212520b58354b7f0726075a1fa1a378699137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb19a55e01bb2501258b78e46fb70c4403c1d9b1fc6ef973eecf2473cda06e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogngh-agagian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6650a00219ee8938efb569de8a348cca3a7fbabfdab4ea06c16d6cecb1c8e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-agagfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f2782228bb71f5d4189adc913d741bc8bc9b1b71e1a690a3fd446de65b49b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-agajafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a6a955ed4d2f4c2acee06e28f65a080d0b95920cf5f56e3a5235881f3b027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a84732e7b1d6920663888d20e2533848a609742d034efc634aaea864c8778ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8aa7de8c10701ff0de58a22760c57c90276e6a508c179ee4df787d85c33680f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...