MAL-2025-173792 Malicious code in butry-yust-yutsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c8fc587098cf54fdea8d3a0ca77cccef4694e13b09a52b706c59f6d073e9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173387 Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-risadipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062a9d7d9a8a201acec0d01a2725be1a96f07729b9c7d7ad4d27aa0009b677bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-afasofavagdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a96a6d1744e436c6c8a872dacfc570688b72f364e2be8e76c7cf4d07c904e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547bc197f1fe8ad97f7d10d9665ee21225bf59b65acd19d0286250de9caa4174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonadfifa-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519a420027c89d5133c89f675c2629c7ff7cf876d92c7c022dc0077aa4c6a2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-giafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80436e2c7e5c8d1af4b2717ce9ab789f9a6306625e1dfb4f3c9f7b51c2129f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuga-ivabio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e70b54d7238ff00d6584f47ea5d9466e811aec87f6ddba46d30b14aec0dccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-in08fdtfdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8a5160589d122a0d03920dc87367ebd02462257ba9f6f9fc50bc41b38e9eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b71bd7e36522ecc6896224eda96ee8f2f0228f1195c4ad82cf3c7c368ecd273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abtengggg-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbc93d8b9857a83f1f785218ed3d1941a9ab9c1da7ddba6b62c5749c7b25c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b77f64cad393e5cd8ac7b4a255dda4d928809a60ffc23195ef740a21b33169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93df9ca8d2beeeff4d75c18953d2ebc1ec4247be8806c110e206baab3bff8a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mumadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddc5963afd1f467fa4e31d81c0d17d67e2182e980618284b54c3a5505983d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4692523f30f6becc03f834f5fb93f73d76f7ad252b5063860266bfef54953540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23f5b3e4aec9cc89e7d7f71aa2e764a62b43050dc61bcfbe0f72b3ed4d5fa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-faniuaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44dd20e339754cec1b2b3cd65d4b0e14abdbe26e8d082d88bb417409a1643b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-faffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12576bf4e46353e9b69d015bac21293a7abf2170710edf32d5f00686e9b3b923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edd26050e3730b3be2fd8476d2bae3a7797d8232689211ed31c67a43148db98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-meme-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed9bbe06fda5b87c198d25165e38422f8e129dc119cb9568377b8c50ce6ca87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...