MAL-2025-176749 Malicious code in nuilva-dadre-agha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39aee204910f1127dcb690e6188c7738a8fcb77a6cb3e66a2916f44fefe27f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178446 Malicious code in sahu-satmg-faninufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0452837f55ac732054a389da7839d86a9190499933f1648627dd3473670625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutuyyu-nuyti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a750695fc6e9beaca03f2dce59de98f127b8e5977cac0542e313038637ab30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-nffamhaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3b2f7b6f3a9145f671cdb83811069b72c6dd12302c83f2db7251d5d8e3e5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopnud-maviddida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c976675811399647ea67159e2b2f64a11e96491a005b0cef5966dedf0668ec78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-dagua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245a797c8cc6e11fe6224340c32a50fa659d60ff23eb70045880887333c4e1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-madidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac8da5a1b04398d11dd97a2ce8fc1652f9db2a3d06d5d1141910930727b24d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf53cf6d4f9aeb63b3cc7271fe219b212aaa603bb38c8326cfa19bda900e12a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-infaduitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b58752f8e36f7f22d92fb1c69551f8bd4041a6aaaf00106e9d2accff5cbd3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58a0f376e30523ebb32ced2ab6221a0d1784ee698fff6008cb24b49d9b7fbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratoafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc4c48caf099951306f163926f2e18a1fc0c85f42e7330e65802a78584ebc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutafia-dagufuatag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a1ccf4f9e6a36b71ec307fdfc71600335b6846c9a1502980b988bbcc4a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aifgfaafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08e87ff1cf782cc581fb4f108ef59752783a3e025aaa65d1f260af734d38b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahun-satud-fado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6410dea366f71779a55df5ce7a35ae7ff3e203d7f01e9e8c4fc4d793b8bb827e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892476635ea943b5e6907bf6df9d4c0a507668bdb7e7fa659e4dc4cb7957fdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nnnnnur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739d3890e9f74b5d122318199e841036f4fa66eec90b648f037a944bdd1360fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trtean-teas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c463be22b72880fe861b522106c736f551350588d059f946e634921ece45c78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaui-sunabi-cufgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e078e7a1c4f93dc6fb9afd5b962c0cd3bc89a4b662060310fc1eb7a897280ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5706e90317b82930734016969e099b6a9f008aea0ee927b6722120f1fef47df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f89e6c4d589cc26a6c81b83a0a6d0c248d35a6123d122185fe7c9486866ad13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...