MAL-2025-176633 Malicious code in nuilva-avmm-rucsivosav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e0be671c95e371bf14f1e30c55e8c8914d068f80fe48b2d656a9e20f5495d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173730 Malicious code in butauahur-sofi-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33989fd4072f1e0d4b377bba0497b47cbaebe5329361fcfa04a180b283cb22b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175781 Malicious code in kupaio-ukutila-jokilouana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501dd078fa9257663b83652bc8c2c44dfc688ceab89623c70492d09379e286da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177721 Malicious code in polymer-afifa-gomagiabafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3d34de171900c706cad35fa4e068912923d9b327b7290e3bf48bad18ddb02e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agiggsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dd46458c5522d8252650ff21010ee55acce88b174b8dec3ef654ac4dee5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhghhsigsabo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fce00ac42ba8a3ae17c14f36f55a8884752f55406db76f670437b46f9fd6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimana-satgub-nainab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e088aa01cee90726df8eba7accd4a8b28b8f007f36d46ed1deac675a9589d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99938a4104c7bdbfa317aabe590359fcc288489af2d1b95bf3cd7bd0931d2d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbb537cd353d1d34b4cc1a84720164bc8d511fc605eab0f8a6c31830fb3bf95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b77f64cad393e5cd8ac7b4a255dda4d928809a60ffc23195ef740a21b33169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17213862d370309fc67d221050fbcf97925545c2e4ef29c901b13ec19d63d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumaivacifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27e48d81bdaa33fa37bf78ce3a9944e992946ebe030f1621cf0d187993ae715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rusiavan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809236e985407e07f7850cde947a3381248f68c34953c6f9fe62bc4fc256f6f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutabagaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f60dd213ac1dcc936753475dd53d7d8df89f81c063a68c480f37bedd8ebd0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-t-gif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e10fb74b6145c5e3c40c33cf4a4db7d66ca662d1d835b591dabd415f83ca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gidodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cad03b01e3ee9b65479b3df034d048663769eb45cf7eae02f0e865fe44e0802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-sat-fadaiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac12c6a55265ea446410aa31eb896ced1f8f2188f9cbce4ccfd1074356a60a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahun-satud-fadoribfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb91c3524d07dd18987d0be46fd6c8fd5954d5177911d49594fd61b1513da646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac772387e300748f1196ca47cacbe1f971cfdac4c6c960fe048a6e9d01be3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-namio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528f27238f2b0b89e48f683b8401ac29aa5d5a8ec7470dc6023d901fb67cdc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...