MAL-2025-173381 Malicious code in buta-fasg-fnda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82bab65bc0a322680f7dcc4603824e18d186751ac193a7abd37300b582727549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177196 Malicious code in nuyar-musfngi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb09c2e43588785892ebe376a42ca7d5a63053e7b3665c11bc7cba1ab984ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-diabatud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40f10c06c5621ce6ee28bf3c1726dd68be399a02c493bd2cef459e5026a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofagaina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57aafb95f867eebafbab362f72d6ec94bb051e8d06a3d4762dbb18004ff0680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a228704d6f56d088d95e2709957f974880365ed7d1ef3deee40891f1de19b042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-ravzfbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4864c8e08e3abc5833306ec541ed5413ae1e6cdfd20f394f88e4435cbbb102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-anjifanga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dbf3ec101c175adb1c3bd4a02780b5a83e42a8fb0e117bd1eac42cc6c6f974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45cde82024633ef42f1b89709db77d690500a37cce99070640b8534337f357a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafai-vainafdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f22c609b6db0e8d507b94d62db6bcbb78a5f676ffcf45e3986c0393d180d7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mnaf-saif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80a945370255753cafc7e5a2fd7951bb3a574ac2df2043d4c3b4f6d89070307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-asasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e94497e27316778c49b27f404433f722f82e4ef432b411dbc36907c53b875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-ahkaosogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e09f74770181a7118f8fd1a10ceb705291959eb6dd131ca5543a33c56a646c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-s-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0557d6dec7124cbbab28a2b79b7bf3fc64b42611aa0deda8a3aaa4866802befe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-faffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec3f02116b4db092dd2c11d0dd87d0a9b1c0f0142c1c69126d0e83abf60b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2bc5073dfbc665c2061d67be249eeea05b390ac62f266627afe22a24711689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-cuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04fca612a121a1853c51c82e0d3a9163b5c63a5dd2cd850cc9feb2aa5c3de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imanmabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e9a20ab5095e3f5b163aefa458789051309ff10a51ddc99b592755be3ecde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-tzest-uytd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903b1cb4613135b855141666ab9664baf443441a84458bac7fb89f389069d2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agavofgagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ef3132ffcc7e5f8a9735e7cc7d49ca90c27c91c754a3ea10a26fd8e83a706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurdat-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73a27a3addb135d3eed59f81482e5083b3c2e3fb4bf73dd1a32ea80e5f282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...