MAL-2025-178343 Malicious code in rubiyem-buyt-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bbe7a491ca55d5a7a003b91905bd92e1bc4fa24f7dd1e8cf3210fc8803105d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176584 Malicious code in nuilva-avm-ruc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da624d16ec50829a7b8bc756fcacd695f0f97558ff30aa072b2821187420bb4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172727 Malicious code in afiasahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df85738a25746e61d895edfb06dd564f5e3ae79e5312d375fe41c31bd5343bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178918 Malicious code in teagod-nalika10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c16915274fdfaf0a81e7add773416050921bd4198e3f307440f355910f77b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3610be3e459ecc1384d23741fbf97ae9eb323d3989b3f235345373bb8a188707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-koaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69421902122801f8ae8619c6717749fc6bf4f4dacd829e9d134d369395c0d663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumaivac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c67102b7004efc89ec7b057d2833f8a70b45a57dd6906483a3e76141b2a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcecda826671d67d43c380fcf769a5463e9a118bdcb4dacfb102796f930ac0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca39931f5676b79adb12e4d966add4a0f192e0284fec24c5df01ac5eb2d85c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ea69a9298df1308b797eeebd91bc2c4fb68413f59bc86145af882d0839c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-darsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36753def0944dfb734bc51f492e98ebf1e82a815aa6d56fdfc84a4fa31ea0d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5007f2eda04b508100c1b91de9c2bee8d17303df47e0c1cbe0458e26227b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-aniunifaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36137157acf73fdb3a895af6fa012458f116cd6b02946b5421c0b49ca02716de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagaffigfafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f824a922720852bad9114a53ee8958d8b9a30593e75de73ce2bf7d7490043b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodasbsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7c14b9f7084987e591715a2c9331bf601f441378a9466230fed8f8f54599da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab65cc21927b5fe780056ba8e1c79d6a0dadd9c3e4a5d1827db16a510a7351ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunvu-udvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cd263bd877b79059636cc5b21811273cbebcae82f27b20e34fd17f7aef26ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safiagiaf-afgucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ec8681fec94a17fa34ca7a926aea74a3c5a6a9dc60783e81f14a1e5fc93a994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a343c5e863c9d385d586fa6a48695790303ed2ac6f685691938b5b97c0aa1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb6fa3afaacde3c664121850415129dd4544eab9413f80c49d71739c937a828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...