MAL-2025-179927 Malicious code in lookingan-jeje9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa90a95265536fa4cf08b7b52309b68ba67822f75ec12419f8525b3ae024aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180788 Malicious code in teate-thy-sonic-okje (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f86e07d70238e7b53fe58577cc736e76bf4f1c1c70766a0a00c8527d99eccd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afadaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8743d2c6b223af3c0118c5c289e558714a44a2f4a1950780a51ceb5fc55895cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ca5499ee64242592ba203a909b4c8c4de396892b5992cc264a5447997c4851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipmofa-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54af6c9ccc732ed3a391e7e83fd1747c41622f93e342983617719b1684eb64d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f44dd9de347e538221c178ef70c8c11535f2aba4ee98d914b7e930f68ab80eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-tafdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ff2cce3e14a1732fba910068b96b37a412a8b32f00794a4027f7e84151a755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-liabokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d673570cc5a9bbad26246b7ddb3fd597615493b69930a9d19bf7ebe77539151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-giga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264ac247412eebced88897263959bad6e38b0317ea905c7860614c9fc42eb55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adar-bidufat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd29acf3e64cf338d285c23ff79895ab60a2e4e033ccf57e604c7410b896106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tufam-iunauyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d7c3ec6bcbd301c76eeab3c2b751331fe9f26a5ed5c6b26257ead16ddfb4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kil-jakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d463812c25fed8f96487cc91d6d058989f8b9a6bfe2c533363ff8c688884343c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terui-umur-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932373ce00cf49d74f72dd6886158b5aa409ac517c6985d4ef3b706b99a2c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5642870e0d373c2fd8fea1cea5c9d1df5c3da386ede26b3ff0bc3a3669df0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudfui-fadb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c26b837d582e1db473e6fbccc84cf37cae60dcce0e1d292095f14181a61fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-fajga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7831a6d00345ac88fa728ab39c0029df6187c724f18a981dadd4b46cfaf7cee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dac1300b7e7e91a167bb49331cd13086d96f8650fe0c1f669e55e9d628ce32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumaivaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc84017d56bfbf756e347627ad1677b446553218abb13ae4fbb23e767d5c7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bd46c11d25c853b8baea11a092b7037039b0f0da2efa84d5adf58a43ceea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...