MAL-2025-179652 Malicious code in kisut-afunig-amai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6a336ce6f1e9e4d7ea4f18f1d92d96320b8b8e80e6c825ecc20291b203cb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b18d103e1a6865d20fd4e2bccecb05247781f6d10cbfd8193759516cc0db3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2795bfc9875219076951e65fc5546f230ea42cd4aa10669dd1faf09240e67dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-dfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d008428743510d77441f0146574ee971839126f2433218504f515368fc9976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177014 Malicious code in nuyar-adadar-biufat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c2e2048baad424a39781eb31e9a66889a612cce333b32ce5e4139f814d3611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174216 Malicious code in goditu-tma-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082ef4ebb543f7b9e55b387500f173c0e73a393bf59ad84417d2049d3daeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174668 Malicious code in hitachi-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e932fcca28caa0f23d3367e4b9276ac427f4ae0038ef2a2f17ca9b155fcb03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177090 Malicious code in nuyar-adarafudia-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c54df64237be2d1e51321dc8ae48d3fccb7449dc5c4b476b0d364219536d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174069 Malicious code in divata-tugabi-ivacafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f42c6654de8ffd8e05a9647d54c7ac91e18de460ac21105f216c874a7bf4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-ahaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f49e4ef46dad839547edfffb91b3830f8b117e8632464b008758b223233abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f9a6f8b1db9613d0ec28ab34a227644f46c69e2f13fe8ab41ad5772b14ae69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-ytug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d397b9bd697da72fc69ddbd3de6fcdec4785306f9060cdddc7d0a9e459d207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-ditofuaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ad88d737dbf068cb007409e666d796cf39a1c04ef555d190505733f8c04377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-bidufatad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfdaf05e7bec23525a8e8d381c0874f6f0c2c4b92873018313b7f2fbb60dd5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab018d7c79499b42322d1212f90da704b9b24d679d3f280f6aa8dd717e786fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavam-madivaunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd68a1b236d4543fdf58d005a5e6091d535f9ba0025959e8d3dc0568fced2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f33a4db70572b5280710a2e3ae89ffa2cf197e8c81a080d0b4000873a727c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abbc62151bbb77a6a55a92993594e19d7944af9f5014608c43a3ebe73e18439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tma-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082ef4ebb543f7b9e55b387500f173c0e73a393bf59ad84417d2049d3daeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaighana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d797ec8fe3e42864dc3657335bdb69bc1d5692f5e531d3b17a75e3bd708be3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...