MAL-2025-178687 Malicious code in sgoodaini-sanuga-nutbagaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be274b8c0b2c4701074c4bdaa5960535d323fa780695034c542142d6f73f8963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176599 Malicious code in nuilva-avmiam-ravfonas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25525091bb8815e14cc34f8edfefd91b9bce7686521933f4a27e98805aaf63bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173937 Malicious code in diva-banobfo-imufibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308935b09f26fda67cfe59fddbe27fa860fd2e6e75eaa1369cbbec119aa9bea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresfd-teh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226a9e8b934bf808147cb640fbdf8dbeec16ea598543c2a7c5ff47920e0ae527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee69ceb278695e31281dcb28851db6aa003a73e827200832249630a46a8df349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah15-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ec2df5e676b94c46eb23fb65db6877c1199731f33a76e96d347b576cf157d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-fadafuago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d506c9f983af991802b2f817562fef99934da8cf066e5ca7c1327b20264a88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigoag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf174ae3615fbb25b6cc8215182871df7f60ad9f3dc7430b09d5fc6a94437aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1495745fadcaceca037ed795dfaf7db3dc699cb00e38c24eb3180b5b25b2bb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-mavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5420cba5ef2ee8af7e1d51f401d346b3e666bc702f71e17b94105f421faaa959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-fudgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82a0f1c6abf16dc8d27c6634da88009d6c5ff5e3d9276f846f7f7e386e5f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sfnif-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc4a75f4822f13e4e5964a621b80eb6c41555953454d08f3836142e7f9423e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-sadamuda-mima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfce67d4648af18485ce6b070447436b01bff9f65f4e4e91a71bf9a635559f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-nab-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd7da4e1cafdf31579ab205264309376d5898b05e46bfdef0e8adb22a17d630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c854e98f15c8624e8d0ecf0d5bc0aa34684cb46e0f9b48ebf731a3a9755f65b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-imiaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449516af6444019658b7ecda81755d71c058ddc47e73d6316e10d294dcdfca4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiva-tumva-dilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65c3ca1ca91367ee7c91a0c483d4a040a1cfc1eb2ec659676dde20371b19fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6b6dab458b424c38b2faa0e37861b31e11228fa0666a58d8634b3970e81820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanu-nubagaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2b0470ce87af5e770874db2f543148f8f1374a56087e89f020feb0a5c8aeec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-aaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce24cb915e4b2f2847ffac6f78d36ac81fe468809275666fc458aa9242f22ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...