MAL-2025-174054 Malicious code in divata-tuga-ivbio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db899ae5edadec64dbe58d08991ead7ff51394d1ddaac862f7ebdcbe24d8c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173750 Malicious code in butry-mutry-ipumt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf725dd108e4dea7f52bbe40f7e78076f00691912c58e6ca56afc4ba4c09c0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173911 Malicious code in diva-banib-imuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02ad46413c928031c8294d654b0817a708137727fc354006452594fb74edcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849dae14179005d030a69a77e4e0de260b0fe7dc4883055cca8b7ee1be1ee05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satd-favafira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92e903dd97e22dfc885640df2837b17ee5a14c376a2dfc1dc9e97a36bde9148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627f0a66556cfa67adfe4d471eb691402ab7964941138852313cb92a0381c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e890e166e82e67375392e48f70386ee81068a07197433d64251a055e221233e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibogagi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b209508c2a99b9acd47a20524bd8efad6ef402b19733d1c7562695ccea2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imbabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec96d4074ea48087063ccd0f331ade85151ed5b387889ffced99249d47b58bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afbofafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3e312f1abc8dcce416d3b5128888331c3854310c1767a12e3a736464332de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-redsa-buysa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7418b87f7ae4e59c7c5336075f598235e1c1c29bbe419adbbdf85135a9cf8d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imilbaiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04c8e7ee61e1ed858f862bf2ca2f2b521ad0056a1637687eea1c01d1314fa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuagoaahaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e6e8834a01787715fb8ff700997ebfbdee08097ca622ea4887a2f5997f798b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bad20d35cd755106587a15ff40d2290f4731f5bbca8515a5c343b8292a36548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafnai-cauabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae4cd645e070191563d236a238e9af64586544140f8564508079323c479918c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924aa87e0ff84c05514ae92d65a1b92be37e9738f807b74bf6122e6ae550f0f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajif-roifaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7745247c836bcc93d9dd6edd1cfafb89d1eb282047def2cf6ec956dfc41b0348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalakioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0eb7a97de83989093a4c7cc12611283010cc6a28f692983058a26fa6579d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sssaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9403a3e33b93bf031f0ef9cfa6823558a8a7f852351d4f9cf9a03e6633081de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusaadn-faud-aneraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a0d0b8c5132f8796921db3ac80e63ba78386145cde0df9e4d7c49a3a55d765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...