MAL-2025-176051 Malicious code in mibasdah-natufa-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1911909afcc5dbed81bf0171ed19f25cdcd5b2144f8fd4b35b2421dd53978025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175880 Malicious code in mahiu-sautg-ia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807b7a3460ae82740040b9f0e910795a92b48cd472b0d9b70a6e94f1086f2f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173232 Malicious code in buis-suinana-madibumovafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3336f0e6f4e7052c4884d7c61d1073d1358c30efc571f13f63817d50dcf0acc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sfnif-cauuis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c008a35ebd520f7b9dba5a631fc1d9bb9bca6d6819ff5346bae134766048b4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraemag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65e6b88910aa1f36b5a448eb32bb71ea93f0a4f8935f5f501438612b280e782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e38ffc250c0a966038ab4015cf4ad1fed6c651ebb6d97b6847911ae3706f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucoposivosv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d833f9ac21e5bfa663f9bddf0c9966c0d1323fc17f4e3b9698e1a5bb485588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favci (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf2df53495718caac97ddd0049d8d6a9eb115aa06d75a63d6f517eb407ad8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-munda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd01a7fa066645bdfdd3eceb9c9169b90b732c32df292ae50fd7c0b9ae6d5c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479bb403280c99a3696745351f9a8629051c6f4559c3a1a12d0dc11b0b3bbb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-roiffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23478f24cf4c080c940c1266dd2274a274a923ee7511443f3f6e4abe8e1ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2153ceb5c23e0e5d345e3fde37f07d1c5e16de1341be33fedd60250483b831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd2b308826e680ca5bdd475c811dea831814b8f24fee3decc0496d2b10d7f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a09b256f3638d03a7378c13ac831116a6a454bfc072105048cf63f2bb8e9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-gurs-erddf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0781223b0f49b583404f3c12ab3b6bfdd07fe96b7d154d6646950acfa82bdc5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-bria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008faaafcdd805769fa06d1270c5ef8ac68e41f2d88cc13bede721e4236a9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4161d2005760e28c20214b7085da62d955bfa8d60387fadf0754edd407ff34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaa32aa12f0a86e44ea8a0d79d97dce272d0f90856a99102b2a18d8bfa46942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufia-dagug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7ff1ebd7bd1b9eab779210cac49155a20544efb2b161706dcd4d9cdb206000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-ivioababga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b5b84d917c9121603089648c51bdac978c28c1aed0a908e6bc1b980306641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...