MAL-2025-175940 Malicious code in mahiyafa-sutiayanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883af245f689a4c0b55a8aa601bd8f5e14bfac1634c955062b37e22effe6559b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178676 Malicious code in sgoodaini-nugusa-tufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3c9908ab09942c244cbd85de3c1237fa32385f995dc158896d8cc7f4e07f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176637 Malicious code in nuilva-bava-maba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1431e1536b38f4177afbcc8b4b7dc07157180d524be7a119c81fde2257764e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179172 Malicious code in thumbi-vs-trsyud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1ff9d7f0356a77d2503f1a99c564a39ed57ed268fb52bdac04d579e3a4a295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175743 Malicious code in kupaio-kulaa-jokiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d561279910adf45252e4b5256e91168fbae024794936d9b3931edaa70e5d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175610 Malicious code in ksai-kaisom-olom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0c52264b5e3fdb005dd41d31b80724487aca4d7d95d3712b46d2a627270f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177950 Malicious code in polymer-gafhgasgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d724ab98ea57b6bcf92297c4293bf72c51509ecc389bc7e7f4aff0c1be47761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176925 Malicious code in nurai-sutaif-danabuffia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07f781e2c76fb70df2dd4f926ee420db545ef05c7b383b54e786f1983b27541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fa7b5381f375a02224c20ccec9e6df48fbc8315547e09f03d6fc66014f559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nubif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf6b2d59dc159c5774478de9c6324e8b864a41f4e658cacc8e76daf9b18d273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godfiun-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15df0f391d3ced42a145d58c487ab39028f127caabeb6cab9ee1e649419059ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gdodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac98307afb1feb6cdc081eecae0f1106c818e446efa535672cb9af2f12a7c527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-iviabga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121cb9396603c204632985133356c03f273fbdecdf90397501c913578bf7d213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipaapnoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe380e865249c5e39463be9538941da7ae4a470b1fc527daddac2719b84ae407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-konto-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd720c02e8d7640bacea792386e6424b79dc54f1bd362160e50a2691e8313a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-cvea-trers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf5f7fd20539430b24f07707bd36b831639b18c1dd5c222471b4e3d769cc2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifagigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b82de9e72f3021b71e6cc1f6cfb2f445e70238d4739ee845aa4f96751faacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9c55a799cf6a7d4903d9c6f03145359df0cef7764116cd2e6f2530825fe6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvavihafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d6e63cd27f368857c85b85e1c83d78428f6d2f9e8a5d2d33c7cfdeaa773ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-duigufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62add8d0fec1d2949c18ce3326f7030cc2af826433ca6024e6341b89ec0d517e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...