MAL-2025-174455 Malicious code in goodain-nusaia-nubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8838576410086b307ac22ef09bed811bbab4358c3c76bab98580c7910e04ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174216 Malicious code in goditu-tma-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082ef4ebb543f7b9e55b387500f173c0e73a393bf59ad84417d2049d3daeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176382 Malicious code in nokire-kushiya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23839a60f08396da07b7ed703cdbfad6c8cd456aa1997b46b8b7f875d0ead384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179142 Malicious code in thambi-yunik-butd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a1717403564fb17e626b624658a484950157855861fc20941b0480636fb4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkiaainor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97313c25d17722c90634852a715b6148c7e843496cba5a293b1c3a0050eb51c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafgsjffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbcbb5735505c001f0e4c8894d166552efac4b41d2ddc22633202f78d26f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buy-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b599342ad2a8e3c2e550e77f14685e0a1e5a9ee423f41378cae33c17dab394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tabigafidfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425abaa50e22c94c730206a1dd098224158470637a27ea1ee07072289581a520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf67b3537ee84ea2c7c238644600688e255d1215709cfb06871e1ac1c41e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca9564dd9849dcdc1a09d116a31e9f235f6c71ad5cf97ee811b54271993d0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ids-drgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1902611482a62127cb7d36f84f2a68e042e376a7287cd6f3a84f53cda1c99c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-nuya-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6a99c246e52276899daa108b84500f42293beff4f0010c90b56ffd2aaefb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-fifagfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fad23ee995b810059d62bcaa762f20b11a5e661dc83bf09e8771ce7df71d362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-mass-snuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60184f2277dddfd7c3559bddbee8c785a7590f818e6a8cd855ed3404f899a169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-cumagau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2266cf9fc6822bbddc534684ec9039c5e8e689190b161abe5836cda8cad7c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaawa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34cb821e4e8ba525412ccb072b9118cea915d3c2b6b18bc0d15dcc10b70e21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c0bbb2a4731602c63c1e0fb3da63ece7c438a18c1d0e405d595b6e04757873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035fd0b6d5cbd6dca25d4c05616795f113b2b74810855969b0e7fa497d8be3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2c593e537f69f0e826613574b64f37f3ff5b6577bb408c6b9dd8fc6087c124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tabigafifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3e4f5f35a0ac2c3297aff0d79cb929b51fae4cc308977beb90e923fc139d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...