MAL-2025-176199 Malicious code in mufabafgi-sufafni-cabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7979dbfbe4b709c164005b0ae0639273110cb29809a4ddc02df530ec835fefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175593 Malicious code in ksai-kaiso-olai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314fbc894947b10a6e11b73071b1d58885ea784d8056fcb20b296ec7c2ee7089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173915 Malicious code in diva-banib-imuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75c06f68f8efb9155080859e42206ce605685c0796488a185a6fa5f9eb26396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176490 Malicious code in nokire-nakaocil6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757997a638012ee69fac67c9206bafb9b97e16491d065dcddb9d9a143669689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174410 Malicious code in goodafiun-tufa-fugifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af772516c68c265f40f4070afcd2e40832fb3494782679224c1bf8bba2de914e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174916 Malicious code in indah-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe34e6a9dc3d6851687cb5f05e41c5621b95ded4aaa65e6a430adbf3a0c79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177584 Malicious code in polymer-adag-sjdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9569f3083d09e4b4f82817a3f50779c3dd979da9c31fc27bcb454a67df40afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-cuagaifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020c2e323a05aee08a868967248ea52856c2aa37efe821d5a70bf7a45ecf0be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048a7137141315346de07e3e998ef33aa608edda78fbab0d2dc5ffae1cf1fbd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a02d9c27cdc8e01665dc042836f221eff6fd773492eee896fc8c36de6f120a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ea731cd259b54647417118f0859f7551ec258ec3dd6bb77b83c101f98352e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8cc85fdc079b7e706c51718094a6c739939657ba748ada6c86cf94cd9090fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-fadid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd202993205829b4fe1cd08c311a9c41e0ba0c60477bbd50b5114b0a7201260e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-retf-rsest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1499ab999d121e06c290e83d86d4741493100f39d47ae616deb479d9dcc3d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nusady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1340054155ce91aa47c9834871d451da0ed26e7e1023b47096524eb70cd0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tma-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082ef4ebb543f7b9e55b387500f173c0e73a393bf59ad84417d2049d3daeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsaghoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dcc4858c7f45d041ced19a6aa61662875cc4c9d9bd0258bc56532f25d7bd162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b22fa6353d88e725735bf8586d9e69f4884f67ebf83985b469b031055302a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trusd-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48825aad87c53d5f57d2d3115b067cd58eee2c82fdf1e2f7f693585bc14c803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c723ca3dea31c23aed971b4a737be0b0e07ca4c7b25508c5199463629a55dda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...