MAL-2025-173502 Malicious code in buta-fs0boobuna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772c70f9a6f74c8f5c0ed4289e7b4cd490d120cdd79b92bbc4f2ee44edb8f596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175587 Malicious code in ksai-kaiso-ajiobaniolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673c04061e982acb8b41c468ff92f4ae89fe55e1b009b60e93fb6f27f970b3f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172969 Malicious code in anidata-hopanud-mafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c60f892bd912ac7f93b3631109eca5ecf685e088b4a511ce2ef09cf047eb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177048 Malicious code in nuyar-adamir-bria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008faaafcdd805769fa06d1270c5ef8ac68e41f2d88cc13bede721e4236a9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimana-satiub-nabib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c44a45894af7ced51f900d7c110f146cfdae5644c7b9ed570bb30cc4a59d69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-nafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beee731cfc1e7d476e152865b05cd529695395e98bca0eb3be5950f92278b2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0428b778941c5cd43b2870c541c78c0bb997c52dae817706b19980be436cd4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nerfaa-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3d01a3fa7cde71a2614a5e34db4d301f18089ed01d10aa50309cd038ae1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-aiforxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00beb004d2c44837b7feaedec8e4c7c47611b649dafd0a68cb836f25c125a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c074bc4163536e9155363a96c917284fec7791f9057e82597b0f367763e6d79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-mubali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5538ed74c15bd744e24c89704d8d4e7290afddb361248044329799eb15ebcdaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da596aaae81497d9a7546255ebfa2126c2b885dc836e8abd48c7a02b88b7735b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-gf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528cbc61a84190a4f3ec327b47ade2d6539b28bff07d450e0e605729bf46ff96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-macoucvoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1549a464a29c7c021793b71b0a3baae98190aa38e34ce7c7557c55b8b37d4632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae539597e1ab282ac8f716ecdd3607197c46256128adcb027d03497e5f38980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famavcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470874765584a2698c1217eba462cb7d96ee9c76f16b3144180358957ab7c732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b769261fadd7b74954ba107b36eafc384a7132206180de4c8d51d4ee15d70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanu-nuiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c464129efdddf6660789acb2ec660dced1e144fb96127fd684ddc7ad88759e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yundisk-butd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0536a81fca66fc859594b93b93061dbd5dc4d6e6d84e0beeec7d442d8637d369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...