MAL-2025-174210 Malicious code in godin-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f6ed0f2b7814ad71b54c1474d749cc9bf48b93a7c7b7b633041d01d0069dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178710 Malicious code in sumpel-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306a50322bb4a61c19b928ee520717c94a2634b2fd74a5a2d13b0220bdfb7a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175405 Malicious code in kapvino-soni-farvaadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86366d72de6ebaa4a92b4319462478b109cc931b839b572d7aab3402399767d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179361 Malicious code in unimnaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b69a4779909b1af9d8d477f9ea7e7a5ffc9ae3387053d746e47e45eac55331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce34145344df432a76c3c5dd014319c6ab1c04cca29e566d57e61f9f61284813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afafvbgdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1c04fd28b40db36732c09ba36509259bd5f4c2ebe38e7a2db2f95ca6023845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-haulid-mubdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0824c29ebea73303c7f68a40ff906e85368f69307ceabcef2ffd03be2a79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-miadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e6c5d63a82132e22ae5c6c40a34f4271940b1c8fab3bc61fa431d72b4f430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsfigassdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac89d14cc705d9b3a96d4e2bf4d9beae037510422b83af634bb57515cd76b1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5495b7ff37f9c6127675f8b50cec2bcf5d5d4e5d9b9104673d9bfb7065f7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-ajola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c0df1f706284a8acb30a9885d21b5edbec04c08d44b7759299da7fd6212842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8a1f0f758408ecb743da75225e2bf6e60eb3b81f97a17cc8613140ff8ff886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45aa9522a6b67d814d48d92af16282f64181dbd20873db7e96a74e6c812ca169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdsdsgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675799f61d609705152a43cb587e2cd57f44577cb61d45b57a34f403791794d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9556dfbaa63c23abad36ae8bab4b2c7a28cf0dfe2e06ec78328eb9c497c02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in truay-opzp-putrad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6dfd5ebbf1e8d7baa1b425096fa9fd943b4df5bfd89f50e3e3acf7a5debfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62718657419bb99589be89ded17adc70b8d8539dc05356c91301fd0bd44d9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-madavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72d36a2b7e5a7e6007c3f9160b3c300b53e11c2dbd76122f270646d2765675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-dgagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfa17e06bbaaa0f0d3a5f91041cd90900ab20848560b3a63ba63f224e8bcc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...