MAL-2025-179566 Malicious code in anais-pappmoa-yamog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330fb5ba62ca21e8de7f482e1fdd47e3e6b2d5e11246d1ee8c996207d6f99dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179625 Malicious code in kisut-afncg-akifiacub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1caf4b142a311ee4ce3d5dd03c6f75de8335ec069c1820faa1a632119b82d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252b30904b8cd11eab07d938be78d1af8fc77a8ae8c653effecdfea0654c6874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditi-tufabmu-itubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b5b5628a623d2413dc8fc0a824e43f81a9f8b801488ccc83e5e23aa91d493d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052504e6dbb255bed00da650bb14612ca713af07982cf6c7c3e25db6a3a74976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fagubaiago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb99ceae30e6f97fec6f8fb0a7111c4fcc1a08ee3e35126dfcee2b7350a658a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagiagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425051ab60f3cbfc25c9cf3675a8f100c3a88f8b140d538c1eb029b0c5471665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbbssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f3702893b3d7d3787dd02a08293f7ef5df747ae8d9c1c20bea851e3f4c059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-sathu-angifafafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94aa0ced1b892ee55a491ddf9d97a4f1db1331eba3f3067181423e73a7d53814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-aggifiafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ec4e16166ecd7df7904630b2afda1444209ed78ffcdc8f9b0898ea47c6d237f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-duguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ead9cde4650dca24b2729ff5cadd2a1cf227e5d71c8e987c791e49f0b0b94b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b987d38b7c9f50c43d7b700e8b62e5ff9a3eb327c9531db0a5a699c1cca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ten-teh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f4cb58fac5cdc657b07ea20dd13edd22f01143cd324632fafae9a893d49072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbbna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c8291803901682f772ecd3b2cf1addf84dbe0d2d32e83c6a245d7008f45e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-audar-baya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d772a7feca4318dd60e7dff76eb71e92f4e99db642d26c8d5e8612f23c845e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b42fb382f97228c62bc2815dc3ec410d63fcfca2dd328ee8b22e448f28aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-ahksogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb31f035009f7cc1a30978126d8cc43ab4e395ac32bcfe32019214d438ad957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f6fdc5ba97eb0fc5ff93f65def8604112afaebe83eda083b609570a6229e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e1f28859e892f2f16c32ca86a85f0add978f99a686266d880b8bbcf38d8fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imunasggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68962eab62aac258bf168456be1f64f7fcaf56d6c7620aed2ba3035ae1abeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...