MAL-2025-176517 Malicious code in nokire-tanjiro30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cac06d8612ca64fbec5f7cc01f0264b1b132694fcb6c894a5b2628e9475789f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178581 Malicious code in sahun-satudu-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc0de63300e947ee2ff420429090fc99f38351a3b298c85d8cc6021060de023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175298 Malicious code in kapvino-sof-vaidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a8b05ea6db4286402ff926cc58ce8fc49e806da74d6e8a22709842e0516b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179033 Malicious code in terui-patrai-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed67047003082dd4b6446c791a85e5f85fa5ce0e5050cdc13ea4ce07547ab71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173685 Malicious code in butanaih-fafisa- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20301b227d46f760b974289381ab05e8066e9ed929ed7255699d394ecc821aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavam-madianav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38aa0f0d844285de267af84634bc4f4d7c2939899ddc279cf0757ad2c0bd1eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-terzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97967029c2e457d27b28ea8103d1ef744dbf2fe7f6adc078027818b6752b1020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b504be35fb048bbab2d8f07791c449fe83a45fc0879af29152cb67bd9110d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiaiaf-cuagafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb33a427da457e87bfb8614de0c0b8a64ff91250b1b2f5db97aad3ccff9477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gidggaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16f11ca63f61f7e664dbcbab2db0a06aed9a175a653758274f8c7ecf8cefa12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f25e7b2d1102044b8522042d555395dffd16eee73d0e1f1e4afe21adb34b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavam-madivabunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3838303c4066924dcd346ed83f823dd2966a3344011a7e59f043bc358bca976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nufti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86108aeedf1f8238b5e28b0c66e6f5eceb571ba29f0dd1b8e2baed3208122c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipipha-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c744fce0dac9f65f2e8b632237bcf13bcd32e61db67658fdfc0988b23e07164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-sufanfufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb208b81f0d1776aa729cd517550d22f85e6444294050279e0eef0fcdac9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-trsyud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1ff9d7f0356a77d2503f1a99c564a39ed57ed268fb52bdac04d579e3a4a295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-naa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35496cc04d65340108a6035dbcdfc32695b0b8f5dd4572544baf249377f9ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24362311ecc487801c4928f1cc02d104e6aa122b6a1808d632d58134d2e909e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiynu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e8a87b31262b25af409a192eaa0f73ccf682e4f106354496a4447ecd62ce4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7cbff22237789a433116e0e2db8da2d1e0babf544e37adb9ccece9015d960aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...