MAL-2025-178867 Malicious code in teadod-mipta19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bff3ca4b3d72285f495517673054ef572bbc412331bf0d85db39a92b3ebd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177502 Malicious code in poglymer-ognbamoah-afgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa720e349accdf44ba8161066611ad9a5fb25591e71e996a66b44716d40ac5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e39949804f05eaf9fe4e5f0d733e93e218f2739e2db1d82264a096418631d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eabe24682293b50642167a4dba10e7fe1c98ef57226a77649eccc1fc8c2e34cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-utudru-uyia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd8fde52ab078ddc24d2fe29f581f018bb720e966157b6fdf8ddf1878469062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satiagobifagof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914fd773ada612ef949e046662cbe69141f3d730a56631fc0f8751d7945d2d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c80ede26acaf8b4cb9d6e68bbd5a7a3c134ef764206cbe9fa4d35c594e32fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musn-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f78fff59c03e508e7e43e0d7ff2ea0bc11a8cdf380f672fd9a01987c8303c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adari-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdba37347d039fab0c2e20836dc0b68f4e1580d6760e104bb28f2cd9ebbb1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-avigpafdoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2edcbd6c1a3cb86aebf3e402f2f4722c123d6e4644d751e607bec66cea7dedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2d4fa90c88a378dddcb87f0b91ab0ce08c3ef5f5fa6566b81dd173d34fd3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgob-naigsuis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a781d5ce7984822833e0d5d68d0dfc94b2fafe0480caea3199bbbfc859e2325f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gauafioifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f6daeafe0ed141c1f54050554cab38d85a81db588d033f7cc5def6608cd99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb982df2248236641487c4d5683d6f526c9f3ff7b7a744aeae9afd8c7744cbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037c6cc0bc68d94fef8f061b9311d230868ebe929814fed5cf96d9cff5f15b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fsbina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21658bf5f2eaa42fbd83ea245308cf4d906bbadd810038cbf66d8c7e125657be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfi-dsuasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8ee806b3d1049b0029e760e1483c0424883438057080c3acb4f0370284c3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rusiinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d377d422d0d04232231e942e2861fc67db3e89a5d604588364928dad85b276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banibo-imifagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ba7cde1ef45e8d6472b7899f9b182571f69957231d51f25734a55f4f9f1351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugabai-imbuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7b569458a19053e136397d6193c7d8cac8ea7cb4b72bcf6b94c7d06fa62991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...