MAL-2025-178550 Malicious code in sahufarf-satidaf-fabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac8540f246ebaafd0e23bbbe5d1ee6b2eaae8845bcb9dab4f2ba33d069d2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173932 Malicious code in diva-banobfo-imuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db3ec98650a4d34dccf0a3f14a0a1fb2e77726c53c1514d582468e9073600a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176468 Malicious code in nokire-nakaocil13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e64cb156df2086796bed4f38c8b460228fbb621a4d0ab5e461b4a2efa4cdc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177362 Malicious code in poglymer-ogihh-asifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7abf477403b3b6ff4abe6f2f4dd61ccba9096519de69eeb7ec459f20c084b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178318 Malicious code in riya-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f7ac2be5c0d8271aa0e619c362f4a2f306d20e90c3d704010fbecac8b592c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172530 Malicious code in verts-otimgo-naofg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb31ba79d10d6aebdf1e40ba272c1f56ca427b87d00a858e348bc2a2bed559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-led-poldoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d533c9e8b8a3b8ab48c42856844435ba4e3aa3abb1084aa0f6a9aa0e57485d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-nufiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3b8fa68f02301e32113f497adc7f7c2ddd4ed923389ee20c790ba8aded5f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172120 Malicious code in apasih-merahd-grsale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d889778cbb781c565ab245da62758af0316cf2c3909b1f01621e86f855a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172252 Malicious code in augis-pomdoi9r-mana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcc4c879252835790385e7f8a46f99fd22b0fccb40792817c06d5a6aa95c72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171925 Malicious code in starstrider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df7785b8f560382d31ca5d0bf67a9aa6094b82cbb73d46b0b50fec9857be76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxydreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4389cf3143f65e4c75bfa8a8da4fc732023ef484c8b130e1ca83fcf5637c5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehmanakram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf768dc279c678baec912eb7f045b9927e99d6877515c262fd77e299d69f5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anushkajain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f28a441a60acf5428862f95f380073340fcafd9a317ab27f76c808efcb11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-minats-buran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920bafac38e932f97b762892e0786998795c3c9645b84acd9baca2ca2afd6379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofa-doibato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b82908d2aee6263bfb23ef8d19d1b9ca100bb4639b50c6f5eb6654de7779e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-ifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd974d9e49ea498b87cfc41f393982097160e9a8a3a38c4df42241a8f2733e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otginagaf-dofajguaggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a2e124f7ddd17503c3d1f53f4f04471e50bd87f832a4416616e24afa931d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otabaumai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06f75838aaa65619605523d432178eaaffa318ffe594f801fbc531bd6c49e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uasuadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fca2605c9dae3d3d327f343c2b918ffd23078764db7f04f38416537434f212d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...