MAL-2025-175258 Malicious code in kapvino-socvni-gbabssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732a5804304141fc798542313ba8edd44891ecc3659c17789ed3da39f7f9d424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178119 Malicious code in polymer-tresd-true (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c19c1e3cf61385a4183fd5ae406ea55113627fb0bd02e33e5bcfa3772dd44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173944 Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175780 Malicious code in kupaio-ukutila-jokiloua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adb433fe17da21678a7aed11a101e9280d4b0ad0c876859c977684619fe00de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f11c0e81ef7b04860d8590a4aa59d152fd370581bd7f5e2c01050bd6d9c672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dwfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f367d44d6dbcc57c07f7d82505e3bb13fea5832866f0a701917e5fe58e500778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5007f2eda04b508100c1b91de9c2bee8d17303df47e0c1cbe0458e26227b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c7d2c4bb9d900b581e6444ac26a8e4ea67a77d8a4d3bc7c08e71d8d3912f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b769261fadd7b74954ba107b36eafc384a7132206180de4c8d51d4ee15d70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c94f562b512e03806141b96cbe9e8df8e77dcfeade7ad6d3d6f99dde55ad180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-fafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103df181ff854d84c7ac5f77c87f28cee40eb4b3cbbb217b9b1fc8486e6a8fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fsbina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21658bf5f2eaa42fbd83ea245308cf4d906bbadd810038cbf66d8c7e125657be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajanoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54f7dd150018d115ad86fa8a71a6eb9b785c6b553ad40a83a54004a94176dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inapyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16929336f49a9dc9aef82c748455faa22ba1c46b49039834c0840dff1c1bb173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ea69a9298df1308b797eeebd91bc2c4fb68413f59bc86145af882d0839c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agafafaagmmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf8cb61ffea72da49d216cccabb7364250aaf83aa9c235c26a35d6560d2902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-darufufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20fa60fb6a1b622459e4b6022c27a5100211c222066d5d9498ffa8d5d7fb637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-haudldi-mil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fd75e7b9f7d1723c590365e6b97b08c2bba1d06d141a6671b93ee0b495f21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kil-jakaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c2e6a680859a9a3e4d843a20a5b5ce115bb2f01356cd50aa7596e9cd08f693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e62f534a3e098eee2d42f84833cd941a4df4b143229d3a30d6b51d73392cef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...