MAL-2025-176081 Malicious code in miftah-miftah8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c542bc39ae046359f38b62b5cbfa3ea3f518b33b7d1e360f8bfa76efa039e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174522 Malicious code in hakim-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889e6480c546d5ddd59d41c2a69b40eb1671b2f022d52158085040e9e48a984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178562 Malicious code in sahufarf-satidafa-fai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb122a5d2350ab2af0c0b224b8a44ed0df53347a4b5e7881885f793b7526479b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radatidd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8546986b07929634ebba78dcca018f2a4e35bf8d337091acd338f663bbbdd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178275 Malicious code in rintono-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ae2d911a28ee7be30ef109a56c98ec0c4bffa3cb51a7d055ebcb7ba49a9cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-darufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78993bb4e59d3f302be264924da46563c0ef782408fd81e2e938b097fcbf5bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c9f3a45c3e9c1d94d6a489f9f8291d4759490766a68875271795c7806409d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e363547f417a2422fe0dd24f048dda31d8cc46f2a05f193ed8058a4ebb67c71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-tabafdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b02712572f68bcde48db2a82d423d1d07efde051c0923ee65b48fc33f6cce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danabufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b8fd9787bcf7fb295e5dde750e2f09817c1f326f43fb6f364eb79de5bd5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5989f694330ac641f6bc356802a34560b47ace1f8c732f434a074a4cc678c65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-ajola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c0df1f706284a8acb30a9885d21b5edbec04c08d44b7759299da7fd6212842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisom-okam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a2cde3a2251cddb6963e1e2973edf14e865967ab9a160a639169fd1420c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-avigpafdoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2edcbd6c1a3cb86aebf3e402f2f4722c123d6e4644d751e607bec66cea7dedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fina-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865b1b3a15f1a2766f70c68eb588fe2f380dc44449f774a3fd11525fdb48f429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b826347eda7ce3d668cce6127b6a782d0536b22c5e37bdeeae392b403b48411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-avg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dabce243a39ce99ebd978312bb2664c8e52ee96b9fbb9ef2c1fd6dfee457d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabidan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af777be0cfb9694951110a242886614f947480349606728bda09169c7cc20e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...