MAL-2025-174036 Malicious code in divata-tuag-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e92303e0685a03bcb9b773440f7aa86f4f8ffc789e084ca0380479dfc1e313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172682 Malicious code in abbbdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73644015542b56e36bf5fa0df66eafebf2097c01f24a88f17d811a64badf7f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178554 Malicious code in sahufarf-satidaf-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140b98856a1f3ba237937d9f0352f30a9d20b4fa73e3dede89ee57ad288530ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-munvdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9ce1ccf976ac0aa45189650c377da439cb4efa4c0fb18447d7ac1d71554265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64334a9b30f4976ce56da1cb219adaef28f5ec1a4ac1ba2cd374390ca121e919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214b7b0ec8e9490fe2c8770254462f72c618e17a0af48b20edeb92c5bc92e0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297de9d103d10986066438c9fcf87249bb2472ce4ace25e96ee3ced1b1b2234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hads-mamadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12eadb475342f41cebc9f80fb6f485547fd714e47b4525b1b54fe187120350e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufanifufi-cagfifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b02e007166faf899d8e14a271b937ce3cbccf762a941dc1624eaf3de4aab4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b9ee0fc9e8ef55bdbaab3c747481a5b97caf841869f89f79c176919078eda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalakioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0eb7a97de83989093a4c7cc12611283010cc6a28f692983058a26fa6579d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-dari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d14c6eda6082d841d7166fad3485ffccd0624f31426601d5842888003e529e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-vsgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18eadd5a4a447830798c5a645a3c68e9a50a38f5d454d0abfae599a40700468a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufaamia-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792aad273abf82ad0613d4db8304e9170cbd392bb568c93c8e7eb66d2c626be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogani-odgafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63ef9b67fb3a1499269a387c9e7b34d5e0cf412cb43b15097372051d30c97d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c31a0e432d4f84b559821b775629e7564b577a6b616559efa9b685552729971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahun-satud-fado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6410dea366f71779a55df5ce7a35ae7ff3e203d7f01e9e8c4fc4d793b8bb827e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-afasofagdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca77cdc76f589878102abdba66591f8b54eb743289086ff795ae7a51186925ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6c6e0f47925ba9e7f34b02ebfff4b745285f36b3ef8afcefdc5f5c418efce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakalokakaaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957f40cd9beee063263447f32c01ff35854b9d818dc6fdac137b2d7de49038c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...