MAL-2025-178535 Malicious code in sahufarf-satd-faaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06232f243a1cc05226760a0354d800d37d0f21ef4c844cd3aa3e3d72f9f76203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178899 Malicious code in teagod-naiman16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3eace6879dec532cedb64a0a1cfddad4da71a6d405c687fee2920b5411c391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175812 Malicious code in kupaio-ulokia-jakafafsofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6c1b863c2336688f9a59973c8e45c89196edf4fe6cf384eca603fe8c9b2215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173227 Malicious code in buis-masi-nudaniadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0b1a0827da115860e4fcfaf9160e2f44161819c0064b38b5819d0cac74a927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radatidaddo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babb00ff3043d5ad46d24b3fb6a852b5329591255ddabe4f0fc8a4da00040764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527ac0cb63400fcab46d9c66d36a0d90f1ffd7d9ed1e519d7ebde78521a7bc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78858a82c57f8bc45a2811d849eb95d4ec1bd60efaf800e46d447f7f6bdfeaff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b9ee0fc9e8ef55bdbaab3c747481a5b97caf841869f89f79c176919078eda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173208 Malicious code in buis-masi-mabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485ae29e4e99688b9d13b3e53b39aee4b57a49730f2c5a7f200ec1222f3c3721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuua-in0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c4abaeb3c6ab3cd9d79127211616df7c346297d469aa355f31e59c51539f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f27326a66b3ee4aae5423564a89d4838c6a73291202113bf99f8a8c37ee3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23f5b3e4aec9cc89e7d7f71aa2e764a62b43050dc61bcfbe0f72b3ed4d5fa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-faubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dccf3863cd5c31a159e563803f723afd7d57d68d0eac9c0fdf912371523030a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a68d3ede75dd2560d76f90104b8fe6981a3553755e8b4983edf85995ba1d363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ea69a9298df1308b797eeebd91bc2c4fb68413f59bc86145af882d0839c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-arash-verst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8108380b85d815d55e6baa9303daae329006eb69c66b707d64b478043a8d69c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617c5be40c41a009038742a8cb9fe5444218e60805946dc081a84d3c4712facb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06afb2570282a837ebb6664e95ac05a6ee8de9c3698a342d4bb558f0aebdbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-brdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870a3422c44565054bda1461a5871b05632650ad3e87037c68415ccf367e8ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopafafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30634cb86813b88c2ee9e4357e63a13e3c1450eb22569fd1d40b4d072d7f9d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...