MAL-2025-176112 Malicious code in miftah17-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02eec7339b33f8fcf58f1aeefed8d6c1161ee4263d7cb1b8dc32b8b32bb8b8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174257 Malicious code in godiu-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743299bb9d56a843d62bec6a0d422267495ee78b798d3e080816ec25745942df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175924 Malicious code in mahiya-suayu-ganoao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75efb949d8bf5f037d9a12178dcf80fe5f12f7aa07d1253a18b42b28fb8f45b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175557 Malicious code in koko-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf271153622f18faa19ee77a88ed800d3e5dd3c1cca237c795f9307dc4487de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8134ea32b1ef1075e16e87cfbb292992a45d6a86257fbb8913ba5ff92d4033c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9170321d24694d6de1f7c8ff8325075ee2efe59c6ee061dcc6517f3685460ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunggsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7876c6dfc2346864cc4b870db1615de7db7fbafe629cf5da7b22712b2b01b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mumaddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a22b19510e198263d3ce352f8b402025a6c930fd9065157fd044e9fa5f3c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-viva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42551ae90a020be9a6a9c7920242cf72af0957b52329ffce498700d243503d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-pearst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b79bc4dd9191dd424812c30d986baf1a17d3f17ec8be946e1014ff40d6ab422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tuamva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07fa8d043912e57aeaf01c3e41edf547b8150278760b07367c4555cf5eae7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2857e882b36d72cdec3e189554d6d457ed19ea05f395ed5ee6401240c4836bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsa-dafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11cff93da1ec7a33adbe706479a40e8f34b3a4e1dd18efe8391b8719847cd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-iduy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edb3c3fa379408fc03eec5bdf47ac75127fda6d054323e2df0dff39474b294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09000f631a615d871f4787e2d3082d0880daf64c6838e85a632c479379bba9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9257b10467ceb4db0311d8a2a0b921fd2214298af29c63dca9d610e7c39879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufja-inita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e49c72bd5979f89ee244ea3175912996cd0c95c8b70711680e7489b4d218c92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-a-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabfa69bc1fa682f1832f531235e549fc02e0035deb3d05006b963c796bb62b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afafvbgdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1c04fd28b40db36732c09ba36509259bd5f4c2ebe38e7a2db2f95ca6023845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42672f19bea72846b66eb91d5aa7e8ae3bbe97d289d445a08c8a80c29e39b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...