MAL-2025-173515 Malicious code in butah-asfui-duf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb62cccc16d7ef52664f8998caf4b079c72754e5870b15c0fe5a41d6f8ba930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172797 Malicious code in alvino-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4812eb0c44d4314d8a4ff0a2919e06864a630872280cc084e6362638d021853d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaiin-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad726613c8c6aeebaf06879b0a795bcd495858b5a3f1dd41cedd2de065961a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivacfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea4447591452880b229dec26d2cfbbe652db695925eea5f7df6a78c788e6da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-terzusy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85802c8332b8c11f732da709007b5681fa82b05f049b34be70163220db2f970d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc13308354d7faf3d500b9aa87400815167aad134bb0e4466005c2b5c29dfa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agifafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87d8788de3c3eb77cb15616e60dfeff9ccf1198483ad1da47ab12399bfe0781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-man-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc4767de8c297269c3503cbbcec213b76038aa0f73c88c094592156781f1b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liabokoamaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee77371844020466aabb0c30097cc93b64fda9e0fae445cbe1294e70ba9300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-darasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5659f279946c2b970f58d8a55fe82befba59096190a4a5925712ae34558becd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-nartipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae2d90a9ec029788e14ca434084304078f74ae5fe993ef6a1d29367bff06b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satsgamf-anujaafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8709f49917dbfbf7f932999066eaa26e36b106fbcc3ecfb704ac9096b3ca76fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d72970096663db00315b727e21189dc18ff669c794b93d1b1affa5cfa4bfa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-buyta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d1778ca31b506eb1e72e0d827552bf392c992b8637c83bd7ad53664abb9466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasg-fanda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9878a84d002b964ea7f229cae91f8970001aa2f96c9cf844113038cb617f073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-smvu-idabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f22048037ee71253b9d9093677afa48f42b10a6dbea986985ab73b83d5e3249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofagfgdi-ugaaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d7d4c0e5b5d88cc4cefe7cc2a162aff7e7f38dd99f297aadd4d9bb9aec8380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jalalokio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2568ce713e2d6e5a1967c74343fe7b652e71a762c9aa5a55e2aef9d4a3556f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-manata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bd374a139273a2e89b649f54e99e69332d8f86a4ccf5a81d186a81facc955c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-goafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817543764a82fee68074c9e6bdbd7711d64c97b8fc362e93ceb961432b3cd16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...