MAL-2025-179961 Malicious code in lookingan-nanakila37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdf92548f3a6d2eccd562a526184e8a2a4beca2432674bc919e0a17737e1c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181135 Malicious code in teate-thy-sonic-zewan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b464e7e66f5c312d8ee8143c174782ec4e543b687186274c038ce515c525e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabaafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3298cbdb8ad8dc83582f94306545ed8abd42b3ee1025c452c3808d30aed23dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satiigof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc73705fa5c037b098def655722e6c3ab1e37a5e4a209318093d309aaf7507a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mudaavdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c0358f0f7b704ad67fe8aff97e209737148c4208317ec5d77a006ca9a5f7de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3401b57529ab84fbf4e914376a692548c9dd237dd3762b2bfa00f4d1ce658fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-anafin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d54f8c34b01a4b3f5a9d81bd4047e88f9cfbaa59cd1f7aec9a87faaf75ef5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah19-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7a46f4ddebdbc20dc3de2b40672009d0fa7d38ac7e5e99781bf4fcc27e019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8059bce59a5dd7634e8db9be2a908df14e242a80229a5636d8405f816bcacc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-fanninufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d598a79116bc5b3992fcf42474234ccea4ed80d7e283c98f847db00d56549e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakalokakaanaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6241768892a230ec8cf9489a5d2f4644ef7f01cb715008392cce14c21f692d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c778c84d3fa089c3ab50bd74d604a89f64307acfd19cf868a94a8e2211204aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78858a82c57f8bc45a2811d849eb95d4ec1bd60efaf800e46d447f7f6bdfeaff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kaokoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bba1f5537338b02019443fe48f11cd7dfeaaf80d68cd875ac646293ade1ef98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-davatiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8e2d72d0873dd58056aa96d7cafc498c10662fd6a26ffc343990757b04880b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufia-guivvog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3dc21a07b4f59fe4630210810f4989f7d50b54239078a619f5942087d07126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479bb403280c99a3696745351f9a8629051c6f4559c3a1a12d0dc11b0b3bbb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-snunu-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059636f6415aef5f657be2d13a4f92fd8dc2faa83df21dce32fae5f264998b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agiggsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dd46458c5522d8252650ff21010ee55acce88b174b8dec3ef654ac4dee5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafa-naufgif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a398e27c14fe387fa88eeec96aad162b3e5fa8e00149c70ed52a177a315517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...