MAL-2025-174377 Malicious code in goodafin-nuiyag-giftu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dae9cf934f1352257a06a752dbfb8a0e326b5eb2c45bdcdcab4f310e07012a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174186 Malicious code in godi-tufufaa-inubutya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819df8bc1bfc9ca62156a1153ecb6b8b50e69e27f2a50d12952d1ad5667f50e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175420 Malicious code in kapvino-soni-fuvdavaibova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd32218ed0331f95490005525b09dc81227434ab90aba7aa4c81e5c2e43eb448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-vsfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcab065774fb187235d13e8019d0f2964aa6351cee1972eeb4a9e294f440a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074bb0fe743414d08d7d9e6605a846e576c930bd565f47ee356d21e71c5422ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-dora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2391ff8005197875595bd3f446b394863152251b6b323adc9af31e703cbd32f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c381652f53c82f8623c38eb74bc8aef5b44f81aba1ae89e31614ca04bac4f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0020e4417dfad1edf552be665c0e7bf4757cbff467957f35fc5ac613427556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fe34e6a9dc3d6851687cb5f05e41c5621b95ded4aaa65e6a430adbf3a0c79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fed384f1319838c815d9ff0bb0dae22baccf9c31121d49b3141358a8e0ec7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agashgiha-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1502927f7c751c85324ef28db3d34d6f71b0e54dc230c055fd8b8f491c2f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdulll-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d45d859145ae92765f6fe76ce2c2f031e16725ce240045be4fcb33dd7d8653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afiamafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbef28e3c5350af3956295fe08b60f546a3feec24b539efbf9e6aa21413348ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-nusadsta-manuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e692dd6f327be48de0ec5b617ad3a0aad33828d4e6d10a48d6b8fd6c4abcdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusafa-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aade912c227aeb1107b24adb6a4e6f214155c9461d40b1c382c97f8371243b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-manuids-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac07dd9c2fe57277cad6a1109cc8260d64c79864c0e7284612e91cda973d3625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-rbua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e6ac2e88af9d360c884b30a022c28539fd411bdcb65edd462b5e24697a536a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-inoufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b319b7c9d698121e6f0cec1b3f09761db8b76059a88386c8720045bcfd0980c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-dafifif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b91773784de7ad5218865b9ffde302aed30b56be4eef4bd0f87a2805b0fef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famabavpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1608b94d75b68aa558da2c6c7d80b5e63ede6541591a2826eff9d69234a9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...