MAL-2025-178429 Malicious code in sahu-satasmug-fafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24f93d5fa64673c2602729ed9cf73c82002156f6d1a5c87fcd6c95d9619a129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178346 Malicious code in rubiyem-must-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a131a9e8f6d25882e958085629508d5518253fe3d036d0335ca9acefeef7c2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176752 Malicious code in nuilva-dadre-ahkagnfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45db4053f2ee94634305831a4a6d7af9445cd41353f42547c667664397461f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178165 Malicious code in polymera-munirat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7565585af5c0ea4f288cdbf777c04707a382db479558b29d119cae924a96cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177425 Malicious code in poglymer-ogminamh-abafaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc8b555da18f35c46ab4afd86cd6dba710391db120942ca06cde5aefb897506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173018 Malicious code in anita-buyau-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615b511f2c68eebac6026fb2bec64dcab2fbbfa5e13e0f61aaf8edc08f8c08f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174584 Malicious code in haritono-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17715fb70c22bc2cd686c53c7678468e16365834e65d71ee9ddc03af65cb8277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176040 Malicious code in mibasdah-manasd-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd2565d61ba6c0424ef9797c538014861493e39b256d94472ef21dc6b5d734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-ahafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9f00506f8e0572938fb1cbda8c58d1186e0c6a7ccc4049c5347890a4b052c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f448da2ed9d18e22381f7b2bb33a0aea0e02c8ce3321ef2a00f26aff94367e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d10f6cc67ca2f7332020c3b0df7a3bdd45c62f6da98f47d173f9f50f4eafbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsbers-terd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f6c1d83b26c69eedacc8ac7d8c70e9db0cead76d291eb483dabd47f02a1b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7a04a1c9c83305c49ce0c25f19f3491ace4612f8b79608d8c8391bba815cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buyafu-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6a6f0b34197d680dc64dddaef1a245f3549cf202af37fea7548c10b9e5850c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yug-yudt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db627a227ac90f17053cb8ff1747657ec5e9f7ecf16c0cbb2bd0fdd5e47b4509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78858a82c57f8bc45a2811d849eb95d4ec1bd60efaf800e46d447f7f6bdfeaff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0b062a53221735998cbeadf4e42f8c38d39c2b728cc1e5de8225462f71b760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0d078e9e833f805c894a4db1cd2373faf6c273fa9726921d51bd14e7284a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-fnfogsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c5a834c65142eeadff4b7f96d7b3f9ffc606440e43835296597f6b20787a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sadmuda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f75e476e0f6828dc1308b8f2db13e6fed214e4e84871d6ca43886fa86900a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...