MAL-2025-173338 Malicious code in buta-fadsg-vsgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18eadd5a4a447830798c5a645a3c68e9a50a38f5d454d0abfae599a40700468a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175269 Malicious code in kapvino-socvnvi-boafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2998e06c8cde9a56f0781e4abedaec6eb1db890d94bba8eb5020a85ae8c3e157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174638 Malicious code in hitachi-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ebce0be6e61c392b3a086ce837c4efc85f875a8d0020c21611f385d26e98f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172763 Malicious code in alvino-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95061da97d86f44d6bf40d6a4096a92bd6a707e2d1c14746cac48e9df1f5ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176053 Malicious code in miftah-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a866add197e2c4e87cd122b035296a6731853c9e1c171de8fc9fd551df6b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174327 Malicious code in goodaan-nusafa-nsafigds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adef264c8170348aeec3bd3b24070fd6b6d87e711c95f295e7ce779e872a036d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176231 Malicious code in munufafai-sufanfufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb208b81f0d1776aa729cd517550d22f85e6444294050279e0eef0fcdac9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gganda-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c0b8abc2190258afae5e38a356f013d5fd786a45192c5dd84d830f4f2ac366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-nuyag-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245c795c5b94f29012c3c42e8846bba988b04d64af94e7b76df0b0e47e6fc7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbfafgafaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30962e56b2dd23f17b6e81a6347d7f43beec1a42697f7c640dcbc3733ac49e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kas-ahakaoliaaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bff598dfe158fad783c53b6eb2f50467b163ec46820f144dffd6ec52474443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigoag-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a7a7e8657d6960fac232ccea56908cb0d836d057f8cbf8269f377dc16ea9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogngh-amiagigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a859c94e443b16964ec837a1d067974b6ef20086de499a2e739e3a34564020e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-ka-ahakaij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6caa785868b8b7470740e14293e39018240880d1932ba0875360e0ccbb4eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jiaklai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa45a4dfacd838fc2cd702cbd0da59a467611a847bf011fd285ebc11b4fcfcca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-uafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef22b07097115582bd4987f6c22757c415d83519fffadb03bf485b386622aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognmh-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eb5d08bc97cee143afc0174dea5a0923c99b98a084d3a457083bcb1c340fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731600607f5a36db1934e835a78ffe3ba6112383dd8f0fa323f42efcdddb5436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutoila-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9d928461b6d1b07fa093dd2e8bc7acd69904c64d7aa4c1574110fe5f3df79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-id-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552229e2f5e7b2dd80a5991ecce31289fd7eececa58ed576a47ff227a1659c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...