MAL-2025-179104 Malicious code in thambi-versd-reft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687b6ea06bcc614d1181cd38b5563cfb0055dbac301c7c2f22d366277a31a394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175455 Malicious code in kapvino-sovni-gbfafgafaisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f428ca492bc6872dbf14ad1f5b06f7006e2739d71631b055fa0c7cfd71b4800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173367 Malicious code in buta-fasag-fnfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cded208a967f012f649605b248a1fb319230b618706fa688c8fa4d67f770aa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178507 Malicious code in sahuar-satidaf-fagub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44958e3dd2863021c62d53b7d8ff7050223475bd1e2baa27f39efb160645b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177568 Malicious code in polymer-aavof-afafvbdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b899895c75766de37d76711ec50fa6fbe09a499f7987337355e8c3a4c02d6984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc04683a2eb990fad46758ea741b9a4abf4e31fb86ef44cb6e630591dc1e75bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafagigaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e822d887dc22c53485780ac24d442e46d6bd17a74bd9869f72b39d6a07743c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-asaq1saf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e7eb35a484f82a4005d0fdbed8665186ad7b705618145988479ef8a1cc437d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e1f28859e892f2f16c32ca86a85f0add978f99a686266d880b8bbcf38d8fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81b03e4420490bc7376be6a23a5186397f8e20d9f2f54ea11d6c48f9928d0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sutavbu-gainafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158af2b37ebd5a9c5c52a2af360076d936a402e9ef323bc38113335630120c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84a0ba0c27eafb01c2f36d87ad5acf45ba90a531c199879dcb99afa01f22157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547bc197f1fe8ad97f7d10d9665ee21225bf59b65acd19d0286250de9caa4174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adarasafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32bc9101bcb7f0772ea423bfd02485dc7e365e5d201ed6ff6ae42c0109caf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-iadafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a587774932873b494d00cc8c12b835b23de06d5fd8611bac6bd95325f5c5c07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-fgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2d707a0765f5cbbc9c8655b02c96bb99497570fa988d2e676cd0d0647fbd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tumva-diafuabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a164b16acbd8dd0a991330a9a16f0270b75d0c1c1a2ae035c0877adccbb60f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivacvafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969b9b80f56330a6feeb6ba66b6bd7a79afb7d04e84e75ea336396a51786a306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc904ef842c166a9c66c80c3cc7fbefecf7e869674ed5778dafa62823db499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1602996782dbf58cc9fada840cebb7749160f3ad1dae0ae36ab38beb5c6481eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...