MAL-2025-179959 Malicious code in lookingan-nanakila35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8ea2756ec9529f2a327c8c221ebac761512f4d2dfcb93e4a12f34541b1d7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180768 Malicious code in teate-thy-sonic-nuses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c652c988e6d20bfc94eaf3d10f41e5e0dd989b4df75bfecb1f604123334bae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafui-datahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb2d862758bc4b17f80ba019ff7f3162148ad83719368c49e7af415a7213a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satd-fariraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab33dcd6b05b471bbe7c710ca3fb6029735e08f2175747aefeea313371a920c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ahunim-satf-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effc96829195e72cb0965bef60ae534ce9eb779d8b3775d3caa276730c11fe45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-men (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab21a825a364e8c752b1976ea0343c29e469e0c8fc042f9e8919a465c2fcf006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4dc20a983854cf2efd88c0a8b59f8a97f9304df8b33b4f8088d80d18992e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayyyyyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e13e1b108ea78c267e064c6752c7d06e453e7c8088ebd7e0e058ffc434a5f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e1a35c125d305e0cdc817828def5d6208e3e65895b3472cb844378cf115f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agafagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd690c42a8a5ec09122eb1bc85760ebcff2a7b6e4b9331f074ff416e03d1287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca32a9fa02fdd49e856501f771caf54b6face0cfae2ff0c05774a387eb3d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb44980d843215317f4d26b1f2328b9f284f756f14deb604eaa210d1dcba54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2dcb5fcc40b55ee138aefd6890fb2993a9ae2033e03b4e09a3757d90c51ea0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifutia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2def5d2afe760801ee420ade225c3c2d3e6d438db72e7c62b386fea19fc1db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-munira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f34cb67f2f0b3f722275d6709296026128374ddf4c742561bef5c94bc798b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-butdyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a708411e6b0960d9490203147a535e9304ed01f2a5f748c1db6c10a31394ef1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaguh-han (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90568b04861f412989ae16400d545c10bd5cc0b87baeb2269ee1959ec6519c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3191e4f52839ce13ddb57f104c3282b7d03943853120fcf7763e11d00bd5c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbedbc6b3a8dcd11b9ce587143d8b15009bc71c2aaf7f0f4c631c6a88de5e11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d343cd40b4e595bd395b4c6000c711ab4fd4e7ba8e1155cd3cf7e8aff66367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...