MAL-2025-178758 Malicious code in tanbr-sa-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e7b69fb4154f6821a5ec04445cd219a163d0b8abfb3e2d49ae4e06920b59d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175844 Malicious code in lia-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6145804ecb00109fd24d1833387ec037977c2551dc9b10dca508d2b6f7c05098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176234 Malicious code in munufafai-sufaufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c66fce9e30fb77f02447758fc3a7606b1046b77e33426c91611eebd2bb64258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176379 Malicious code in nokire-kushiya1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682ae07ac1243b4a2888c48de9bca9e1d004197ff0d35c8358a668568ce222d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-sra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa7b86dafa5b4d7f547e46fe56b3cffd7092c0f37ce477e4db0afa507f7b331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-bun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32593ad9d9efeafc6dd5c1ac2a7f1d042ed3e3270826c674e346c136479f058a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-anag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270f8ef9263867571e84e1be31d5e1cfbe7da03e0d69ef9d5c245a4144351cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tersui-marina-nutru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698fdc38ff316f24bd97d5563a8e1dc7e8a4398d89ad3488ed6bea18449dc2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipoha-hafufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217fd93df2b07ba8c0825fa0d090cf95436f14c8e52f9690f8eb0552a22999c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24be8edfdd1a7fff1c6b90445c527d14851974b4d87b6d9c3e9f907e1488fbbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-ravzfbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4864c8e08e3abc5833306ec541ed5413ae1e6cdfd20f394f88e4435cbbb102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofagfgdi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7bdff361910612ad5866f24d6bc26a53778ccaceac8dacdca8ed4fcb647b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iafagugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e334f2619b984306c1497c95a4e005d464defeae23f4b889dae24d65a9786c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-ubisap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d69b1abddd215fd1ef8922855e3fca27e3efe457ab4c7c2a706ac12d01fe270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0abe6ca3c4c472f145b7fa827d094dc1a90e001cd2a1f89aac951a41b443b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-uaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcff5169e12d0c430aca4d3c8a48a47ada9118edbbf0675e321f1b2bc95703b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a866add197e2c4e87cd122b035296a6731853c9e1c171de8fc9fd551df6b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176056 Malicious code in miftah-miftah11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d21298f912c2d02db0275650bfad5221d91297af81e039c57489d26cdc07c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175904 Malicious code in mahiu-sautug-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9214268a4166248256a1e8935bd10a175fd84b7ec4cdaf49fa8dca7887ed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177994 Malicious code in polymer-gigab-agaigada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecaf26d9feb58db9e3cd80a8a99ea143f905fab82ecb7330c442f03ed8400c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...