MAL-2025-174014 Malicious code in diva-tutabi-ivabagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52b38f56dc6b8ff0bc92ea727407a192889b9b197c1a0bcc29462c7c33bdf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175970 Malicious code in manusidda-nusadsata-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e370826ab40696ed6c821f4c790c6ee210ca0309c0e9f7f6abb31d7fdba2958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174210 Malicious code in godin-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f6ed0f2b7814ad71b54c1474d749cc9bf48b93a7c7b7b633041d01d0069dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnnna-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2521cb09d8fd95014d7452287059dcddd92a5ae01c87d7b0968efb7326c2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in truay-opzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6dfd5ebbf1e8d7baa1b425096fa9fd943b4df5bfd89f50e3e3acf7a5debfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akkkkke-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697a4c67abd318b39a41e391f0a5ec1ffcf92e2ed9dd76115fd294e1a22ca9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45aa9522a6b67d814d48d92af16282f64181dbd20873db7e96a74e6c812ca169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f563b0bd7e5b0799a16fcc7a7ff62fc087398919af8ec2e9c1c488cc143dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-miadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e6c5d63a82132e22ae5c6c40a34f4271940b1c8fab3bc61fa431d72b4f430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9556dfbaa63c23abad36ae8bab4b2c7a28cf0dfe2e06ec78328eb9c497c02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsfigassdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac89d14cc705d9b3a96d4e2bf4d9beae037510422b83af634bb57515cd76b1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5495b7ff37f9c6127675f8b50cec2bcf5d5d4e5d9b9104673d9bfb7065f7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb84d963dd4ea50bc4f5e62ac6655216bc281b80344befd0dc75d32826602e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8a1f0f758408ecb743da75225e2bf6e60eb3b81f97a17cc8613140ff8ff886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdsdsgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675799f61d609705152a43cb587e2cd57f44577cb61d45b57a34f403791794d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526b9edb8a6f39933056ef71b31f98a6aeb32bfd515c07a6f0502c896cd9ef4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-safif-cafguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58eadf5cc030cc3b14627f1566fbe8ea505dfa9ded682e4e61200eb4edc1d0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d103a8a8262ce3e67e51bf2a834d3fa7f1d6fea598460efdcace1bec01a52ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...