MAL-2025-173385 Malicious code in buta-fbna-gafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0898988c003871929f3b0771dd5cadd5340dc602b02746ae97da4b2d116b5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175272 Malicious code in kapvino-socvnvi-bodaasbsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b3ac6d90ee5a0c8b4c9a0f019505ad969bd3dced602c0aaa23b90dffca8e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177028 Malicious code in nuyar-adair-bun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32593ad9d9efeafc6dd5c1ac2a7f1d042ed3e3270826c674e346c136479f058a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sugoodaini-ngasa-abainfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6686ba229268d648027289645cab4fe0869c2db574118a22ba545ad73ceb5b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-terd-vs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb642e3de0c4ffeac07d047b341b46933e801716caff6076729938a00184b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-asga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022578055b366ec533d4ae13f1c422de4b48d64cabbcf7bcba89bf640203d10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-madibuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016aacd5d1c68b277e3bbdebd964f05535bf607f021fed5c564e2e1d78f92429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipoipoha-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f351f6482d0bcf6273f01d2f08b76db7bad26cf8ca9f229cc6be00772a8970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-ahfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dad219ab0086cf34801d83be1602337b0b32797c0b8c26cda3358313e669752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd98d931d63618ae1d99df529255b5862bea427b71e1afe751d4210cf9206a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-baya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9b83b070b9fb9344aead823b515ff248326ab4395ad8f758503bbcbce73264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6afd20e1fad0c68c1daf36f568008a1ec546d125013c8d358cbe314e11da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-putyi-poiy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177b4f560e478572475e61830c14bee4582d7a8adc03cf027a0bb4c0a884b36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-eruze-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9577c95917d650728e14b7889355d0085e008b2e29625dc1bc2d20da3d147ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognamoah-afiaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee7d2effb260d3ce6def41b643d50a990cfe208e648f0625958f865a0b2e900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutafia-dagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73e78dbfd91e81844877f425f23e9d07014a1e5c906877ede19b710dee226a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c3aad49df41435bc64aedd1f2644c15861f57ccc151c85eb668066b11d9251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagffalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b14ed0ff278f9adae2cb0130aa5ab3509aeef17da660d79b73e884721db8af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosoganfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc4fd51131943de3f6c9ab378629e96359427ffb42eb4e404f90e5a362d9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...