MAL-2025-174879 Malicious code in hunimia-satihub-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b6ce4ed8a2e3fa5f24c0f9a877d47ce430d34a83bac6c423ac5996cd360e236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahf-radaod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8b20c08110522ce8e5311cc90c8f150eb6456758da66a7240ae0650ad282dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfudadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addc95532b427c2af72a34f3d71c35b77856d06c172564ac5fd07f8175b2b4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-rafosbsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208b053995fd2c10c1394a9055453ec22636fcbb69a257cd8f9fee88929a3e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-aniunif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57fc360b560ab9263358d44b31cf7f48e63bc409f6a25dd472822547e92dd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fuvdavaibopva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c64af8240e2e15d1c3c758573b58efacb4c0cd16aa034013b1ba289bc7b190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banibo-imifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54d753f63b8cc1e5677913f2de7c252f2680b0a12404a6c2ad749cf1af01f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2140051e0f5074c3c46ae4cc2bdf7054401c3f86436df605331b8a66a3bf5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musn-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f78fff59c03e508e7e43e0d7ff2ea0bc11a8cdf380f672fd9a01987c8303c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutau-guiavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd79936b320058dd1bbfcb8e3c5fc9833c2a7b811242646d6e1ff9636054d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631834580551eec606213693547546cf73c3db49000153aa61e456621a966707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nfuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2819493aa637019e8e8a5cc4400c443930d3a0f13320ecfcfa53f2e512fded7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792bd0a3499b7fc6d4619f249894fb4c31665c23f00a915af98e608592f422a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afaf2abb75851677650538be130a170ab0cee6007dadcb83dc8d3f74d2a305f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gidggaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16f11ca63f61f7e664dbcbab2db0a06aed9a175a653758274f8c7ecf8cefa12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177020 Malicious code in nuyar-adair-banerdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79281bff5d282062572d0ef98b94ebdd99d38f2df4fca01f709078f7efc63c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-set-ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9d43452fb6cce6694246e6d2d998d029e4df6dbe932129c18aa25e57d8893c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuga-ivabaitnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5361888a3751e6e60fb728b80112e4c5d564ec59c9b93eaa6e7a5ad11def3a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173706 Malicious code in butanaih-fafsa-darasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c3e10833ba1ed5e52b31afff1f7bb4058869d10158dea7f143f3fea0f55dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurt-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914b1340cf07532a55667232a448fe6ce0bc3439b1963c4a155c6d7a9fc0e8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...