MAL-2025-173458 Malicious code in buta-fippoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36065b481e6a544d64cdef291a15ffcf9182f460687dd421cc83832cf5ad03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175243 Malicious code in kapvino-socvni-fambavcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8168426b9769cdb2078df141ccb6feff4f7cc3cd8b92c066f65928eaebd3e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-sohyun-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cb5b64113ab869583e87ebb189eb75513270c25e6056eec5d041f93ae37b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568670d26338071c933750800f136cd7818e1c5af72cbc07cbb87239def569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-rofsfafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b48a4de9ac554d65d0063c6f77da4a9e4067cbfc3cf0b8df78738661496c948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fc82fa3cdb6b849edaaa20d848c18c3b93c9da83efedabdf0998930a7a8643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9a3ea8a9b721e5868e2b3d1e2510695e2d83e278a89324a98023202053b047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimana-satiub-nabib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c44a45894af7ced51f900d7c110f146cfdae5644c7b9ed570bb30cc4a59d69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giftu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dae9cf934f1352257a06a752dbfb8a0e326b5eb2c45bdcdcab4f310e07012a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasdah-manasisgad-msidnfsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb103eaba1051938e775f563b882262dc66acb18b453363f1d83287de4cfc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-agaammi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c2c5e537edd1c0c0c68e8209f7dd95990cd038b25b53bc0e3c48afd62b347a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipidsdfha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47297ab5af505eaf1ee35dba569edc4e26904dae64532a3271a09b2dfcd183e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-nutayayafr-kadasida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba1849552b278d6dbf6af5099ab5f30ba0ae760f97f1e40164648cc2f8293b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimana-satigub-naiboaib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4531b00ea30fb1c4f742aa8c886c10d2c30752d6a75622fe9ff00e679565a4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179097 Malicious code in thambi-uyte-buddtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c726ac1c977048b9fae05cb36092a9b5c37110d83650e563cbfe0177b8c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175618 Malicious code in ksai-kil-kaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff7a5779efb03502d365dde8e3a70d8b265729723def42413c4bb47e0e9c25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174386 Malicious code in goodafin-nuiyg-gibafgitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f3d9f59b523b0f969b0dd435b47aae44abcda0bfdfbcd059fb9afe2e23a33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imuabuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8cf9423b5c4b312e0c19a6905b6b71a94462a150f1f567b1c316bdf4778631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oaalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f4313ea308ae524749c7fc45e88150d5395fd9ed1a99426d370a1548247b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178939 Malicious code in teagod-rich3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e007e1739d2d76fd304a324ee323a154a02b8fd128e6c1ff6e33d579d8571d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...