MAL-2025-174802 Malicious code in hunim-satf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e956b8a161434c9a4829e26074b39673c0e6f2c2f91d43bf4c3971108820754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172825 Malicious code in anak-jalanan-mdn15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967f00c9514edff826c0eb2eb31e5b434215dded85c5d1344302bf912e55d82d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed7c0fd0783ab7ce2c2b421f10e908a8fcf1d944a0f8fb8f5110c39e2009e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravoiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfab3768f840af9f6b834729b0d25f9062ab995fd65db1526004ea7caa5080c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-bytss-dfdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d91f25bf79305fab4133f4846f02db05ffff963bc64cc5e42e24676f3025d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-iutu-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37320324fccb84f00e726bfacd505581d26b38675588bfa6358b295fd937ce81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhbo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00ca4fc664d3815e0395d1c8e96a808cc3839bcb3635ce36c7cb235d03d35b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-aifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3823c5f7c1e6f9d8b6c98da2115dd033dd0a0f8e80263d69b67f8939e873b2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saviotn-sadfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265812f2ef6a9608ad29c5742e43a03caeb357005e4a21d8ba9e07af065ae252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-naba-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d79dd8b02f19c034c6b39bb40049031245ee4912e3375fc245321a5f628afb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fabasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42924a909c7c072c188d23479d9e142a22812f20e9c6c089b1e1f3496b4d09f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6415a10cab18a23636746c7f43d8662e5bc83cd457a752f9e78fde5308c62be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af52cfdfdc017263b39290c0e2433b7a7e7795772b3550fe02999cd8ded95d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f858f65acf12a5bbb6c3a11fff89977793a57ef2952102481e59cad1d7960b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufmia-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8943cbf9d890b3812fd3af9b5e93a61283ae7ab2c9d5fd76fde646b1b654dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c31a0e432d4f84b559821b775629e7564b577a6b616559efa9b685552729971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-aami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a612773ddfa05110a41910516fac1ed4f05ec23ad17da8ea6267eb4edff2a554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-nusadsta-baddanto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d040475d984535fb373957156c5b43cf708dcb8f6433e598e76eade52b23345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a123054eed82745c74fef2fcf5234400aef4309d0187e058aa1943b209adcbe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-misa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474765c164e26af487b9eed74457eab3d6ca0746854b30a93a6e809ef71e456a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...