MAL-2025-174406 Malicious code in goodafiun-tufa-fuagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f18f4774575ab7cbf4e3d2431a58f39f829ed2b24c4845c4573d7b33b13295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174144 Malicious code in godi-tua-in08fdtfdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8a5160589d122a0d03920dc87367ebd02462257ba9f6f9fc50bc41b38e9eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177332 Malicious code in poglymer-ogih-gaghuaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce051774213a763606f7c315cc465e722516179cec69806edee7d7027659575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173870 Malicious code in diva-banbfo-imungsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517aa0f7afd82b6bced70247e0c81abf295e12f0b404bcf2ef1c983347e3a372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176843 Malicious code in nuilva-dare-agajf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6306ed668180f798d9bbc6116f06b4200bd514e540a01a854b0889ca4b24b498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172864 Malicious code in anak-jalanan-mdn9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d95dfe224559bf6b7160605a44ff1387698ad1a1bbb1814f295c595e1b2538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9247132a49933be75a619ea0113ca6792b69e149e81df449d848fc086295078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sadamuda-mimanada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3951bdf1274886dbbc5ddb919df1ad71bd50a6e5e1d06930fa02ce30f084f24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbfaaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d5fb66f806b0132ed80d477e3ea0431c52d18abe6414533534a0568d2aaa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e485095ad6e8a5c37eca76b5d29d244c583184e5e92734588bc4aff9271f183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuua-in08 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7fa4fa60e621fa7985104ff3eeb499d84489ada04d2e26a46a568896cca87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-maniak-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408efc2a1b63c139c8bf5adb71d303d29dbc475cb91521a50a9f765b9d555fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radatidd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8546986b07929634ebba78dcca018f2a4e35bf8d337091acd338f663bbbdd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c5941530280809ca37ac109dd1f6e10f464fd338582f43253ecc8dfdba180d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-darufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78993bb4e59d3f302be264924da46563c0ef782408fd81e2e938b097fcbf5bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8eaf0c026ebbb0b408cea1a964da84a8283fd195f680ebdd4e31195b9d2357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-sety-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0c2a816bab602584b1fc42e3ff486cf8e378393ed4a88d645f8f1fa4f612e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bb06e2b2adb6076fed137e4ae78fc0f65a0570cecfba9a0be7e8ee2a6bdd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938b68a857d6cf530ea1aa83ea685a4c1107a4b861d296e926433d5f9762bee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idas-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f58dee0c4e41cb831d0a1f27327fd2bf43e47996743601cf467b59b9268fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...