MAL-2025-174376 Malicious code in goodafin-nuiyag-gifatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb82205c9bb56f7812c30fb833c00242c29c0bef508ec4044014ff2cc66e4b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175666 Malicious code in kuku-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f43c166e3b17ab77b8c5919188948700ad1fda0089fe0d5b37c5873ce4b46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178213 Malicious code in rindaman-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6301497f4c05dfee740b2817abc1a76cb24c7b8e8b838a17234c5afd1cde591e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177038 Malicious code in nuyar-adamir-adsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d738f1369336c2a99fa032647fa7c5b25f84f7c1568c9a994cae8b6cd65d4d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiygia-gifafuatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066bd72f19ded76f1449fea5cbd80f71958fe791c3929837fdfeb92a0a57e54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d127e7bd0f6675f98410f6fca6fd66a0e32b8169d021580a0fdd1dd772aca33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2342b11a2a48ee3b1500f8f06510b558c2431e052ff068b938c725edd6bf9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8183086d494d89301f8656d111757cd078546c72d7646f2f5fb6d18fe63904c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvibpva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e9fca1d265c95d1b2ff849c2366ccc41ed2e8ed54c20a7c63ee1083e6ab84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-verxs-vfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49aa701036fd69ec6fa57b86f2fba75b3112d614f9b3ca5273b676b49e750452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-addar-baidayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b2fa16e25fefd779cb02379d4534560163add22645ee79ecb57af8a75efe2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufja-ina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e8b9febc1a2403370cc78accd3f9909e5f6debf9d7e244b1f2d8e5bb4b6b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-daurufufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f6279e6513f93397be98db0ca4ae509300a09553b1c962755d0bce57ab711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rusva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95e858c32778c025c521770bdfb3a477a63e6ae4f62a4a63ba89afbe3009f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faivubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a29175406badc58908c2c8552f46d0ac6913a598cbbc2fcfe94b0231bd0a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghih-fifaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca3c95175411fb7ad5fcdabab75bda1da70fd5ab0c0a048f44723198aaff005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9491b5ce9874eac4f7e7f194f1aec23731569b255cfa7a3a10b7ea37afc5bfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b020985c9065879070afba41cbbe014f30aeabb022522a51fabdfa050534c2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3db47b915cff01f2d440eee18d3eea2833a76f49ec57690be12247daf751c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-liabokaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054efbf560a988914435a4e4dfcfc982a3b39f71251a09d75791c68db34cf244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...