MAL-2025-172939 Malicious code in anidata-haulid-mav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d05c892affb08516a8330fec0fa422d4c10ed20ec68a0130dfbdccf44c30ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176386 Malicious code in nokire-kushiya16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd30fd5d69c06d64e3e9beb33602bbac863040305cc8a824540d3596cb67b6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175863 Malicious code in lia-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d8ef965116ace02927665b7e333e394065b9af084aa1f25738978c1409c5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samu-maima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7e3e7d2283dc71812420c5afaa766ebc5e9680fcbdd2775d436f501f8964b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad158cabf8ffc36d579dc76eddbd6544bfac68718867ee2e5d60eed59a5d54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-ima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7db1fee5d853ec169dcc9de797e485ea453049aba38336796225933db5392d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satasamug-faguo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4100b5e0678d0b1987f601a6172fba8ad5ac17810a9af1ae1bb20eadf36a6eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufa-guivoavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607f7a6e3e61b54819b5df9a2d886c3038f3a0969b03f14a36354b881f057951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1622e9386f9acd3d43df9abe4ad40ce54bd292a9cb928a2258bd3e64f1298323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89df4a4c0f884bac52cda110a7e5f5f96812686c8a5b6fe777cbb92280c38c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-darufufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20fa60fb6a1b622459e4b6022c27a5100211c222066d5d9498ffa8d5d7fb637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisom-okalami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbf95f5d892d0cda31674788f231c62fef2ee4e31121d1f4b6fc044ca36a1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f465af1df4c6b122846953eefb69228aec69f5c69a0d0457c5ad320620a9418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-cuagaifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020c2e323a05aee08a868967248ea52856c2aa37efe821d5a70bf7a45ecf0be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gibafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7476ddafafd9283829cbd50f3e2cb5f278fefe01452d117d456f8f6ca5d8e4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fvpavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b30e6a54554ef361fb0b37454728ab259657f1f22887519d45cbbf866bab4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-fifagaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169370b2f69eb642874ba44413e65f545d5c9cd16cef4ac6fe05f9151c0506ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67e75e2a878dee62ae66da04541fd65ead2cf177b06bd2e19f08123c934f6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadbafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094c3e177a68a39ef12260ff947924cea85995bbfde6f28945c617276e0b2731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fafsfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c6bc63015eab172687e70ba27fbfee85050cdd7e98cc2a613e96d8f6d48a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...