MAL-2025-176369 Malicious code in nokire-kushina46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a215168efb4c76502829c24236b601975993225945cc8911a164b355f2abb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176579 Malicious code in nuilva-avim-rv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13d9787aa98399c2490fd512a9807c74508a0518b906f25c2322a5372eb9432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bbccddc65b921a74d92c8a0a2c29276a16d503bdcee7be2eb170a41654637d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaihha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284815cce4028f3a014bf457e4048250b6f68c436224e8b97747ec41260e2b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafifagfofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393a0ce7a7a4cccb09a1aab3d550c1718bf295d00b5dc1b6c6a244ac88a83ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6afd20e1fad0c68c1daf36f568008a1ec546d125013c8d358cbe314e11da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanabdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6ed025ff8404821e1f3684303079187c8f2b9301b3dd97f6dc68d374e0c0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce34145344df432a76c3c5dd014319c6ab1c04cca29e566d57e61f9f61284813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayyyyyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e13e1b108ea78c267e064c6752c7d06e453e7c8088ebd7e0e058ffc434a5f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samunu-maiavcava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194e6f0ce6fb8b4c827204a3828481539c9ed853e90d8073ab09b5e0ee931ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e963143bc2fadd80c98a33a3be3782c7b03a216318c5c0a04d64d053178193f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafanada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb583c823924a4752c1dec17fbd8fadd4ca23e07a03dc5f9902221d60ed302d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c9f3a45c3e9c1d94d6a489f9f8291d4759490766a68875271795c7806409d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danabufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b8fd9787bcf7fb295e5dde750e2f09817c1f326f43fb6f364eb79de5bd5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9215c03523386d03a1c2040e7274bc08c707d62aa103cea16ad2d766d09bd55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-afggagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23e234a00624f3b5855c63f8c08b1d5c70c2464cbf16f2feba8edece52f0951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vainafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef59a88dc85f91f7d870aafd28370edb96c1bd1517128ccdeb84e685f133ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ddcfb23a5d1d7b536eef4c3fd361e7cd48618ae5bac94c038e43e9dcc5250f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-asga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022578055b366ec533d4ae13f1c422de4b48d64cabbcf7bcba89bf640203d10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dea51db246cb100a76ce5e59eb5c830ffcdd280b93634273edf10ad5887e0a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...