MAL-2025-176582 Malicious code in nuilva-avm-ravafvuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b377ccd40d7e2ba69f49087ad24bb68fd8ea553a9a506e8c24f22d59cf054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178977 Malicious code in tearich-good6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c2b973309af1cf7258241d079c5adba9964f7743f6baaa881d59f7c8cb5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178607 Malicious code in sahunim-satudfui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bb06e2b2adb6076fed137e4ae78fc0f65a0570cecfba9a0be7e8ee2a6bdd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agifafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87d8788de3c3eb77cb15616e60dfeff9ccf1198483ad1da47ab12399bfe0781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-utudru-muty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5949b2b3dea56ca6ceb72a6a1aace906fe85f528411c969d238e498f863ac1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagiuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578c902bc8f090038fe1a23a8931a8998876c46e58743bd854e8ce853abee279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-sraav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb9ca94af79d84a7c90f85d15a7de3c9255f401ed6992772d655050caed07b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afafvbagdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727ef9ea5ca0213c7ee670a2881b53bc4387ae1565c4cb7d39b76fab1f3e303b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-agavofgagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13775957f947c9823eda96fd223f664f182503484de26777bfa7bd31b9532411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kais-ahakaoliaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b64cd96318e54232e9aa8b1aa439118c937e44f5dc1cc252b4b8fe85ea3cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-sa-duafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5413486ee73a4b3a8bd666b5a192ec00cbcd66cae7515d0b44d8810bf7727427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipaanoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79490f0134b7f946e2aa733eba3c3c9628ce8ab5e929ab52875948b8b4643279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-danabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234230d6ca9a72313a64dcddd488a4d1a3f7e5208f8cc76e4013bd81e0d69a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimana-satiub-naibib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5335e47e01f48ffa2b4aeef7bb6fd84d43ba0be6ba7432f70dd96517666e43e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b0d80fe37fb5caf4ad0d843bde023a31eebc5fada943f9b8e6632500941651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b826347eda7ce3d668cce6127b6a782d0536b22c5e37bdeeae392b403b48411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhbo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00ca4fc664d3815e0395d1c8e96a808cc3839bcb3635ce36c7cb235d03d35b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300c4ac68a124b73be46c7dbd9f2563456544c7d153465ac54b6d53bb43a2a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-nartipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae2d90a9ec029788e14ca434084304078f74ae5fe993ef6a1d29367bff06b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofagfgdi-ugafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef65a24bf45c37629e2c2ee179699e2ae7f939963d70203c2b70edb7d561eefa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...