MAL-2025-175081 Malicious code in kapino-samvnavu-bibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9c566586a56753bfdbf3e79a6a0ab1bdada37617f81def92b5983995efc8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177097 Malicious code in nuyar-adri-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8bc4cb616cf2f0240b87591c99b3452f136a630277a7aeb314f1e51ef8568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sat-ananfin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7564b5a2f8eaae6a1fa8621acd6c0b3d25d261ffe70688a62226046689efaa38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659bfec906eb033e041da9f48caa179acb9cba15f6769a96eade486d2445194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafasi-vaincadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8785f2a52c0a1022d08c326a3b55192c6a5a1b08609c56ea75d7812c7fe2cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tumva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38625bc5e649fd1f3b292f62933d5e7c7df282d6f069f60609fc6f64682961fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-fagafiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6769c6d722951e9714490aaace660f1763d443fde177f782bb855b7b914aeeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8248152ed20d6b7e62d52e2a4fc6ea510654c96ef5ccc2c30b254c8b73f0f8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngusafa-ngia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61d01163005877843c5e736eedba9a69e260e6bbdb03c1d68387dc766480f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b86805d5e7f900cc7e24a044339c06c2350e60a0056e24da5a76db4b839faa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177203 Malicious code in poglymer-ogaguh-hiagagn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a922a5ef7f6434f1be39aed43daa66cc9d0a7b32c1a49dd557de2006a9b16b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176772 Malicious code in nuilva-daerde-oagfifafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c37eda24d8d8941f066fcb7a2dde358df152a1cbad8a0a05f2c240df239acb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfigas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8edd7f5f45bcd64c4d1da7ebdeead714c5daf79bcb07359ba4348d0a083593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f641bb8f73128c2dfd9f035cf57e0385f1bab539570d5b2fb5d6e98dfd86cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88de77cd189961f1e53a1def8ab0b82b18c6b749d2066ab6444b78a3292b0270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afmsahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7898535c649041fee364a773be40c01f642d5424310b9b17f73ba332c5e98aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-saigaagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e98b431fc6a63dd62773afa46c5d2db77f541c3415a91f98f8e7f3cca2eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiautua-nutuyagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc5e6dd321bc64237364e7b4bca7bbca0d5ae65d47b373a0993c7c9382c314a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dde271a62d8a0be2a8317a66afecaa89935ca2c878864b6b45f9cc578f2b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-aggifiafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ec4e16166ecd7df7904630b2afda1444209ed78ffcdc8f9b0898ea47c6d237f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...