MAL-2025-178602 Malicious code in sahunim-satudfui-fadafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9c05bf5ae9082d4b370226c1014c171a66ea49a892be75033f6136cad343de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175863 Malicious code in lia-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d8ef965116ace02927665b7e333e394065b9af084aa1f25738978c1409c5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174401 Malicious code in goodafiun-ta-gif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be353c3808f2fbb2f415b8dcf09ad22cd83bcdfca1a7b52bbc63f95ce6220e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d1ec4d11042392e2e4ba3d1848ad16092ab309246895db49b16bb5b5333549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banibo-imifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54d753f63b8cc1e5677913f2de7c252f2680b0a12404a6c2ad749cf1af01f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-aafiaavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5492f9a5b0faa3432e07fd26f18b34c82fa8bf80e3698405c5478ffeb6e789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfudadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addc95532b427c2af72a34f3d71c35b77856d06c172564ac5fd07f8175b2b4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37167cf41107d871f8bdb660ad7d337b0e45dd06658c46714c8ee3fdc12aead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38d1f789798a2a7aefd55c3ca212eba2ef60d64f2607c8c4f339cf5279e9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufanifufi-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee3614b425331e5ca333e906dda4d074a6f0e8a65a190710b6663a8f4f178bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fafhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44a8a9fdf2cddd86f5135f7350c89c745822ea8f7e9991c87fc7c931a91de82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasiffa-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accdee34ab69600aa450a65a541b5480a1c674b45ac8972ee76b58f5db4fb634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b15d47ce762e1f19aa3a96ccd8b8fef7983f6d9dbfc597752fd2aea3a5b1ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-putyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964b27e6afbc63705e6904b9db6c7bb04c0c73fbc395584c67995895fdcd74ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-ahgaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8512fc7c16b78e27718f01caa03b39c019dd1f3b648bb1d91eca634f9c1cd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afhfia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8ab4aec6b6fb82f907eb53ffdfbf5add6d4c1875ccb94cae0410c39340b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stbu-gaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1008a077c819ad12067ec6c3c17dfb3e8a70895f0ff3fa59fcba1cd581dd7101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3617c2cbd6476df934330153ece4593b9ce48955102cb9e44c84640bc224d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c652053bc81a10f806d5cbd2e506fc747a31accd684ceccf9d7d05cb958022f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-raviav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f287a621d3652da96ba813d668e9c31d6667f7d32d0c8f8a2a318f0cc14371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...