MAL-2025-176308 Malicious code in nokire-kaguya18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2bf5566bc0ff849b76074e065470bec8902517f7c8990b617efc42a70d20ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175105 Malicious code in kapo-sadamuda-mimanua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3013d4349238b9c5260b098fc6e47a8a266352041c6faaf0d85ddf2fc6be8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173956 Malicious code in diva-banubt-imubr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74477d2ebfd7ebf613c73a14cdde6e935d6dc3868088e68c11c91efe28ef351d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufufaa-inutya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11e8a258d182b3a82172ccf63b2d263d7e4406a33341425c4b4160f3e306e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca2ee2335f26294114a8a1378d6d8ea5cbe8d480273c9cd6f558d1ed200d7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-abafabbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e6ddef138d99453d15f240495f4761536143e52dc139c886ee6ce3b4a60708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imbabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec96d4074ea48087063ccd0f331ade85151ed5b387889ffced99249d47b58bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-mbaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f166055f85adc3e931c989258e1f649953cc1909d0f7b97b95589d9956fe5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-ivio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29e09a38bf9beb7a3af4f3a9de9592b3140bce59f1ef3ca77d25574932bba27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faa-safa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af48019ff53b262b0cf24e045739ab2a1f7721c8a608d3f5b7b88db0fe4897fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imungsbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a75ed469997feb08fcc3b52724e0835a8c77fbf23e9f777a19bc43ed0e4614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivanau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c56fb940b34e28e52187be363ba3852cdb5d01f5a8fd246b911bf97b52777e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb833bc6da93f337f94efc8943baba1d1884289e2b7776daa27fffbbb39b24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamnamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78133df4ee3af729499450b93eaaade90c0c5cdc0ffb7f3814c23dc608ddb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifaftuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8c4098b218c73892703a594ba5367b68fba69f4380c4dfa06daa505a25585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-muayt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b31577cbdee6b46a48230a4c3773f279f483d81f8d3039580c47e7e48e2186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banobfo-imufibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308935b09f26fda67cfe59fddbe27fa860fd2e6e75eaa1369cbbec119aa9bea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec985845ecc62e92d282e888a07e88fc8c211507f6d31688a479d6bc87b8bdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fiofoana-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1be99d2b3b023e47ce7a1dcac47269cbcd7c7a1db5d5fac92b5da70b4fe95e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-maffmasdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430b3ab53ec8ffe1c7917a58e85bd481744b31ec7944a5b442dbedad27e73871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...