MAL-2025-178452 Malicious code in sahu-satmug-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62c96d4e25fb5692fd3082ddda4ea57842b8f1ce142c21a0854327c944ebabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173194 Malicious code in buis-masi-butanamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7408c88f8ab500aeced3b53d96a25ea83a9a8a99365e4b63ba4f592322f753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifvgfa-ratavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e39411ed2c758abb3b93fb3174751b8ce4fbf2f192fa78636da5155cd853ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-macoucvova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d66bef4d1dc8f4782c4acbe5756a15051632569eb46245f7862b0fe46f4ee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac05a151f319c0fb9f1978fc87b22eaec4b5a5c59ef884f36b4becad00400b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-aniun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3016b52e4fae821ecb06383a9dfbd52985fcd93026e09fc04967e720ffb741bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-rda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ceeeeea8d1acc600b1b8415045a53474e47f03d17450dde5965ebecc4e1c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32375f0896ea92f9aaf6be585cf1983a97276171c33c83c9420d7fc805c06aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e483a78aabe90c57d84e3f3a3d1036165aa803b9db2c00d03b7f63accc209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofafgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d97dd3fded2fd64dfc3d9f4385fe5714f39d7445d7dfd5d94730ce51afafa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infaruduitag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379a21f979b9f2744e8ac7d2f659de4bc5ae467b6fda1d0fb7fd79f23893b038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nafuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05d37e73c5a2a7863f6f9f091f7802dba78392704aa0fc0bd7e669a73d7214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahih-faigfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3fbb9c43938d0201734d7cf7a926d1ce6a938e7af2385a70b21af49091b421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jalalokio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2568ce713e2d6e5a1967c74343fe7b652e71a762c9aa5a55e2aef9d4a3556f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiya-sutiynu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b680b3a834f54897ff7852f6bbfc1a84247288ce77259bd53cc81a965ae475db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofagaina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57aafb95f867eebafbab362f72d6ec94bb051e8d06a3d4762dbb18004ff0680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174703 Malicious code in hitachi-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e6cc488f3dac657c2ed6b2ac53989021c99b03224be44760bf6a3bd64c758c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173566 Malicious code in butanah-fipha-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9f06b3f181e2a3ca3c284dc5414d1202963f651c639cbc546940461ee4a868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173343 Malicious code in buta-faina-agana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f9b9ab50291a60a2209a9073407aacff6455b7e255f423bc738b9774909205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175359 Malicious code in kapvino-soggdi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9304f4d4cb03150a1e0442946785003deb8f9925cafa92c205b16527b23fe71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...