MAL-2025-176096 Malicious code in miftah-mipta21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac92ec444ce853ac43b0f1dff29daed80c6d20c5316b20095300cfaa8b140fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173127 Malicious code in budi-kontol-rus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca0321de5945eb970139c9de962c27878821437201e51061fdd9bd11079e67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175168 Malicious code in kapvino-soafasi-vaindas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17be7a9513639764637612032ace81fed15fb67e7ac47a2f738efb4ef0878e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b0d80fe37fb5caf4ad0d843bde023a31eebc5fada943f9b8e6632500941651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-infduitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2b945b4be0530ad2607b294eba2fa6e6d8df51fd7ad1b0bf42b8078879a423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87c2954b15a6fd9530bc57df81fe29cf98e671c3da1f9f09439a502121518c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gasunad-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c142b41eb9944b3d4ff9a42d12833f8024b4d9e3ded2a8f62b893b7ae1bb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-fsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc033331c55d0a45d54da6b222406b004aaff9e6ff46135329165c898d76d24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab83cd552222a7e4c74bf42fd86a0e1e85de583c5759eede8e57e0ec21d6bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173148 Malicious code in buis-manais-bodada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6147bc2049b7df27d5a7507fc062dbebbaa6dddb88df3118c45faab6e59523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175816 Malicious code in kupaio-ulokia-jakafofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00eb70547c548fee38aed00f83212520b58354b7f0726075a1fa1a378699137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173429 Malicious code in buta-fipajapanoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8dcb7dc295e81c2d67d1d4bcc798f9ffdebbbe56c507e2b8cbb6e67cb4a73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179211 Malicious code in tray-iutup-ubia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40eaef77c086f5e33f40e3656b36000d515aa2283543bf1353314756f355939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173424 Malicious code in buta-fiona-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f62002f395ff3aed799fcbdda1a49ca9a1dfb660fd3faed3e8c42d55b08a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178180 Malicious code in rindaman-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df2451a632052d8124ccc413ebb8abb891675e8ba0741bca340d95294f915aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dc12e793251b7a359ecf60a628711581878bc0d492ed76819698b16b942610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sat-ananafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ad143ee104d57fb19bc0b4ddf1f81706b5291661769418e33bf72a94beef73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyg-gibfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289034e195107d06d814b1f532602a9d4860b790cc0e7d675000c9908558488f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravooviav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965004c3e0cc33a4d9f3c03d8412c88cbfc953c56080939679ec310bd8a05fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diaufauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3b355d1aa718888c72a079699c095ad2d591db74d38d2c32160e2eb024f3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...