MAL-2025-178506 Malicious code in sahuar-satidaf-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a02d9c27cdc8e01665dc042836f221eff6fd773492eee896fc8c36de6f120a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadg-vafgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9263b0d1afac10e6bc832d01e5647b6c324cd9113036497fb67edceb089f9e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179365 Malicious code in unimuna-safiagiaf-afucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c81f88a5f1a7903a5443a466944873b9863462c1121dd454ab3ce0790d15fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175414 Malicious code in kapvino-soni-favvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ffa64c64f67c3a99f1b6c6d7729b635e6c377c843c03a318f3d34f8bc43d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1374aa0a1b8fb065460ff7d8369142033cf11e897324bbf14296024091ffc671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5e6195ed110bff4675301113c2954aaacb149f6feeb5e361c32b3027841a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce051774213a763606f7c315cc465e722516179cec69806edee7d7027659575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-mass-snuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60184f2277dddfd7c3559bddbee8c785a7590f818e6a8cd855ed3404f899a169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-mamvfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d62b018e3cfa2eba75e5ecbafa02daabb75310e6c29ada746f516cd7a9c7363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aee34cc5651400f9e3c40028fd578ae287da983c012c7c64c86f10f2af7a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-tzest-uytd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903b1cb4613135b855141666ab9664baf443441a84458bac7fb89f389069d2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932bc33c6478912fbedd1e7db522bcd4d2fee122a9ba408d810194baa4563094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7a9a79985f90a362b0fc179a6a803ca752bac487f7d99f6f11899d31c2531c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufa-fudgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82a0f1c6abf16dc8d27c6634da88009d6c5ff5e3d9276f846f7f7e386e5f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2bc5073dfbc665c2061d67be249eeea05b390ac62f266627afe22a24711689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-afasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb86ea9cb41aaf2fb30c0a08c9a3bca1a62f2c72dbb01a1c7683626ff44357f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonadfifa-abddma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2b59aa88a91b9f6dd91260a17a9cd69da37382b1630257fb9e63d785699515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...