MAL-2025-179151 Malicious code in thudmbi-vds-uyli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf1cd4ec395b23a894bf7c0ff43a929ccc4596e633da07eb802f1a2f28b5c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae85d8eefd583532ed19a5d167b751d4f9e03cb2bbdda26bd6d06099b05f80eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-faniuaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44dd20e339754cec1b2b3cd65d4b0e14abdbe26e8d082d88bb417409a1643b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a39fd2cccfdb86eeafd53742cbc6f68cf1c1973d9dfb4b8100540efe905f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-fja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f34f6194e1d0ef98868770dd9ed7a0c0f3fc7abbffc572a13328f980942208a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db7e98b9bfe05120e242f05a6f2504c00f2707eb6de9cfd60434aa8f37e9940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fe02864bc1d348385f2cc028faee685996b1bfea2ea2e6020d485af86504d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f27800ed5b7ffea490cbeb10342f30cbb5280fae4a0cf223268031ffb2618f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aanuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7880b3f738609a02028d4fa189a972ed9e32dbe5482b5991e45248860b4f812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imubabuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66060cee423f559d6f434f797c98ae03766645e7a28578c30c2cedc3858390a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6cbc7de5e146bdc46571d8a1eb6b571362574a029eb01bacb34d4c5c31e0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcf2084f75cba92468da79c4654a7c107d8ceff5ec5896e3dd51b00e74120f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavam-madianav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38aa0f0d844285de267af84634bc4f4d7c2939899ddc279cf0757ad2c0bd1eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4285142638ceb1be42dae6eda20cf2323146b30b77b9317a4e7ebd4f152e0ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farivavadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd92107a416fbe777654efc30d24dfaa061e5ac365d0f62d40d64d3ef0ecf914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608e40c8e786100973cee06caa213f036afec4a001f62e8ba66260cce4acee4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ff139ae33dfd26b124789b3ab13bab1906077f2bbb3b8a77af34a13143328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c0f5851e66d798525f710105ca5b014b1fdb52b61aae8447d01c57b1f45cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177024 Malicious code in nuyar-adair-biduran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da71015b21d0d690b48c34148b952411c7dc4aa809ef7a86f3a56dae026e89dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176899 Malicious code in nuragi-sutaufia-gg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557975972d0e7fbbfec1d7febad83028449c512b83dafa183a8642a6d691d3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...