MAL-2025-178780 Malicious code in tanufahuir-sofai-dugufaiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e775ef72c846b14a2d08fc969ab39c3530e0ef887542ede8bb3ca90774a2017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177565 Malicious code in polymer-aavof-afafbdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645e20f777e3762ed74106e33212848a5be8540bd538b45f0818966504b6e455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179057 Malicious code in thambi-freet-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859998978d6a37295d001b71f95fc74bf35a325ea01c450b9288db921ad5c58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucposivosav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8959a35db3d7c8ddcb7acc90c910a392f7b347d89b94603483fa5b7a7dfd50ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c381652f53c82f8623c38eb74bc8aef5b44f81aba1ae89e31614ca04bac4f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d34ddf6c7aff7ccdf6b5c216bf7467244ae9808a418545f1acc6cb2e386797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-agavoasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d488106ef0a3cd5328aef909d9aab3cbd6c73be7401f9d1dba1db859d007025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosogonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fe57e9091c62449f878fb69de2dbeb45343a0c543e4df28094eec7d10b3067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-set-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f390a91ea599b210e62cb7a661c02b793b80a8023a59320e94c7ef270f28ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nnnnur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945c76ab0c57365cb3fd423636a07eb5868f002925ab93bdba324b9c4e2b83a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daujhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9dddee2e014c6d12bcbdf3e4167393f4ae1b2501bfef24202f7a698fd1b6e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafai-vainafdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f22c609b6db0e8d507b94d62db6bcbb78a5f676ffcf45e3986c0393d180d7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-pajifasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10595eb04ca33228a4e29029c14f6ebb18e098608a8b91f749bbeac38ee515b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51300758fd6b77ddbd511ecbefd0c856f28490ce98c1b2b1372a3cc1ccdcc4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah16-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fadfeed743560539da679410c1b0973d77d60427953be26db420f00d2135df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55814364a30d90f33ef6b22d7b30af31fa5ecd22833671837fa8573679c26dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oggh-aghgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88fcc22fbebc31741497dfdc21ec6680c3ffd164f8562bf1eca7e5a0910370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamnamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78133df4ee3af729499450b93eaaade90c0c5cdc0ffb7f3814c23dc608ddb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae301f0ebfebc8e3f2cc88299bf64ab020182445707f4dc1f25ac2f248bdd0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297de9d103d10986066438c9fcf87249bb2472ce4ace25e96ee3ced1b1b2234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...