MAL-2025-174356 Malicious code in goodafin-nuig-gibafyfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b43f101917ce203411281b569ad9442a9e66530c9b1acf4af2d5d5c064b132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174445 Malicious code in goodain-nusafai-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb54f98d406f3bf694383e8110ee85e3881ca80104f34021c75e19d6b8ca742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177052 Malicious code in nuyar-adamir-iadsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3cd11f891e8951d69f0be904584cfff72b797d9a15f4e84d0a51c4e7125f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-opzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773477cfeaab906ad08112a1c54156bffefb829c5b3e848f969692022ae654c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mumaddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a22b19510e198263d3ce352f8b402025a6c930fd9065157fd044e9fa5f3c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afusfafi-dafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78808ffafae8a18eb3d716bcc42cb2fab1b2861533a1ec8954afb4adef40c4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2857e882b36d72cdec3e189554d6d457ed19ea05f395ed5ee6401240c4836bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9257b10467ceb4db0311d8a2a0b921fd2214298af29c63dca9d610e7c39879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6448b09c348fb38f2e3c3467603ff6a995d667dc5119818cb9baf724fb968070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-5-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a8cecde1e1fc2091d9dba4c71827ebdff10a153f0edb5908eadba6cc16c6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9d996224353f6e1778107f719c0024707f240d65d28412befada48360fa7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fedbb5d5c662b341e43b1be0ccf84e11fcdb8c41f0910a23769949ce3e5651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393719becc79849e7608d719be85dc5191bc42f3ca1b7f5d01a88f88ae2cf60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9214268a4166248256a1e8935bd10a175fd84b7ec4cdaf49fa8dca7887ed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognamoah-afiaagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a4b06f46cc29728468e55d9d1dbbfd3b79375dbea2946fd8dc6777965cf075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0568b6bad1e90dbba6e0972cddc6e9828cc47fd5928d7637d2f8db9c321d6be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810bb22a3585f9efff4bd077d497271517961b3e7ebc3d409ee096aad47b33bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-reyta-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c646a10c2247f5959c610a20de7ca489778cfa1da01a9e452d90e2666a10999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mn-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fca0665b2e2f707d644605b9a126fc600f7b5fce8facaacfad6fd0d10f96648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dca4ebe89ae666ed4b62f563c52cbefbfa3d24bdaa8bfdf686868d3edcfa35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...