MAL-2025-179774 Malicious code in kiut-acog-efv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033f5af2d20c2c077597e46a586c62c45456605a8194fe11c9cab0d9d0c8d695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180733 Malicious code in teate-thy-sonic-nejnaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408a852eff89e5c3d287c0bacccc7825cd4b1e30aabc445a4c60d44c679087a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180203 Malicious code in teate-thy-sonic-boca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e457392257ef2edc7280b305692fb8cf66da00233caba51b1c338bd82517dc17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175991 Malicious code in miands-masidasfdage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb45955a7aaa6ffda55cf347060a30562333d51f122a728c2d706cf0031d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-mado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15856f1d268a9c2603250c25a6023de27a9f3b8cc36981af2d19a6a351bde571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-oagagfalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905229e764f799e0a06f7e47d10d0c24ca5c2edd4b13a54332b0c74c6c8415dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-ggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e5392d676eaebaeea4188c1a1c51075f6fb0a3ad52f10c56f534b9a4ce104b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01efd5c981a6c59a6f106160e87ce243e046d6d97bc52d69b7871e61672d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agigagsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a3ca72ce330fbf113d68681cec823a3e269e4680f14cc787635c27f93f68ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-gaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bc3e644db390d87f40e339da1ee2e218c9c459ffd4ca79b34d5778b39faa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimana-satgub-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41bdb1b2ce886163e1ff76e4be47176280f3b8b5f4ec61e4d13eebc7d879634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mem-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e98442562c4b001550ef675f92b87705d6ea5a60729dbd7fd26f957d8247bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bonvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0966d47c80759182b867f75475116ccf0d9bf4a0fb3c0867966c43e6f298e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555fb4fa843923e1f995142e505d69df583718209b40eb6ff388238e27fcf24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-pustr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbdf7e34bcdd42c233a3c22568ae4c8b20fd8fb8dd2ddac197225a33c4de42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-verxs-vrfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ebd83a5ed9d1f5a24932c91e819357814dc446b62d420a6cff5e385382cd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imbufabaamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468348f134d8f2f2fc2dd4b8bf3681fdfcae8b776ed05c8b268630b96dbc1fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80d0e6ffaca4e52d85c219b989f6970a7709ec5edf726eab4c485b5604fbfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1a35405ae7f4dbe2451e8bd88a0f05a9ef2fe69d02a7b60d750e3de136d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sat-ananafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ad143ee104d57fb19bc0b4ddf1f81706b5291661769418e33bf72a94beef73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...