MAL-2025-178791 Malicious code in tanura-saaufai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1ded79c4442b5431b4aacb8d19e61bb2aca236f172ecfa322be078f685de45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173619 Malicious code in butanaih-asafi-dahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c2d79c82ad9a8b8eaf09c487965d5dfa46164616e3ffb0237c8b1e1b487a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29f3f765e01e504250765dd4ebdbbb2905a5f988e497cc5fda8a57b7c0288cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifovagfa-rataavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2282e64cf4d78292de53b3fa057a8891e2a1ff351fcdb940598b20f2eb95d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-olai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314fbc894947b10a6e11b73071b1d58885ea784d8056fcb20b296ec7c2ee7089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-madivnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca251b3954c90db4db5e4f9c62c89c72a321bafe6f432cb22b05df25cbe953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-faguba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565e119433531a7bdf1040b34619c81a328d9725bdf35354d0866b3a8e0d84b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93d5a12d1abbd9551a43649e118212b46099678b0343bf1e838e8f070ff8451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ana-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd632e820837b776208c045812dc3d4830245590cc487e4d1c0f0a79cd865cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2381d00a7117cc3142bbe724c53b4998461f9de697ecc036a3080d60dbe3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunggsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7876c6dfc2346864cc4b870db1615de7db7fbafe629cf5da7b22712b2b01b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3485fe21e42d845bfee181f788ab26a2e5b369c4eef0b03a3fa3ccf92a9b5cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafaufi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533aeff4a6755a7f5a50e689ce38e2d465b92191936edc3bbec6681dee9f7727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-ripa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bb64548ba3e4c45860d59bc491ef203b1b2481e7ac0ed721300d32e49e8ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aghashggiha-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e9f4e4ddb8200ae6dd3ba7e395d7c8192a4b2a6af7bf9377421a69ccbd71dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famabavpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1608b94d75b68aa558da2c6c7d80b5e63ede6541591a2826eff9d69234a9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6823f80d97a0a8d8bd57c71390e571943b39fc2f6e70d852594e5bba71d973e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosogonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fe57e9091c62449f878fb69de2dbeb45343a0c543e4df28094eec7d10b3067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutau-guiavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd79936b320058dd1bbfcb8e3c5fc9833c2a7b811242646d6e1ff9636054d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-nursig-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a944a8414a1b49c4ddc5a2846b694776746af4e579865c995a5f3446702e746f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...