MAL-2025-175228 Malicious code in kapvino-socvni-bofafanifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb988625790eedf739a3e3937587e707dfaae22106f2ac778a62d52579a7d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177728 Malicious code in polymer-agashgiha-agahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1502927f7c751c85324ef28db3d34d6f71b0e54dc230c055fd8b8f491c2f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179082 Malicious code in thambi-resdt-sdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd5f1c9d3694ba4788db538f942b317903dd8d6fd7956d9a04e3e0961998189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176682 Malicious code in nuilva-bavaim-rasiyasiva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc87aa4152c320978117983a9fadac703ecb0dcdbbc6c5ecc5a00ac2f4294a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdulll-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d45d859145ae92765f6fe76ce2c2f031e16725ce240045be4fcb33dd7d8653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8fffe1df0267a4936867f35a6e96eb2e0edff125ed24507d654b67d64abb3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyg-gibibaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23d7ba4ad7bb6cb5a95701f3c18de0d01d986947a2b004a04f52f4d1271f119e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab925f468fd095abe12aa3d1091921103a94c0b4f11c87984dabe7d090591a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-nafigoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2236bd8376259ab0ccf31a54483b98d3f7ab9b72f2c0877a511eb184b4ba31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c58aca0c3c2ffc288ea7ac11ee648c2fd5e39779168de93e64c9b86e54b0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-favuti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17bcfb7574e8df955101565263c41ba680bba6c894910153723794760b1253b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahun-satud-fado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6410dea366f71779a55df5ce7a35ae7ff3e203d7f01e9e8c4fc4d793b8bb827e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakalokakaaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957f40cd9beee063263447f32c01ff35854b9d818dc6fdac137b2d7de49038c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infaruduitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7308d84c23ba680b6f9e3496c696b190dacc290e25de20ca0693121818716dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-ersusi-vdert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ea5f8f7164a9ae658802f5d36dcd4234612102533968f960ca52304a1c1400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d81629a108c1c22751904c02fdca540020590588011d855c481b9775f8a2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-aur-baya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27fa5e2a6adb386194df7482426309e6c0580f83476ff27d261c7a00fdf091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tunbi-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982036e76d57c10efc87ab1850ef2c36de691616b613132d2c811899376c91e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8c7ea7457624064e1235f8db1b8dd32c976e13c177d2b44e8c34a25892d9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-trusd-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48825aad87c53d5f57d2d3115b067cd58eee2c82fdf1e2f7f693585bc14c803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...