MAL-2025-178660 Malicious code in sgoodain-sanu-nubagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c698ba8d6149b458fb44ad88bcd85874be6c919a082fb8756a3f9cf9b3874ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173358 Malicious code in buta-fana-sadofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074bb0fe743414d08d7d9e6605a846e576c930bd565f47ee356d21e71c5422ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177913 Malicious code in polymer-datdfadsid-doraem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4fe1a2073db57f8d3fa910e952f34af3479102bac0fcec20f3f6824a0e53f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177430 Malicious code in poglymer-ogminamh-famaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e9eda6b5410d677b997cf7ddacba4152556329e848059e6a1ed8d02bb4d6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a90b7ef3abd6ab136b7b3ee97c045d8122f8ea6ce6c849caf66d4bb0491ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e1a35c125d305e0cdc817828def5d6208e3e65895b3472cb844378cf115f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mumadadbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aabd5154fd659f12465690bca50608a4f0e53fc03fe61aea0bf6a9f0fe32f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsafigassdfsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9d0774ec95146167830408b13990771fa49ec4f66b3523b2cd010352f76934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipmofa-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54af6c9ccc732ed3a391e7e83fd1747c41622f93e342983617719b1684eb64d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akuu-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ba3d42582882cba3894ff7ac722a7f0383565ebb1645be98dff2c09893f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a131a9e8f6d25882e958085629508d5518253fe3d036d0335ca9acefeef7c2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusia-nubaftutai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0761293b6420ba5700aada94de37d94928987820fb0676a336eda1d71a0faffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73235b3f77383261465dabdffc458ddbed053f10bf5061af278ac0524591152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-boi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbfe24b2804e5e0b8817bf19ba6c50864ef5c909561f220ea420daeb1371d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fc82fa3cdb6b849edaaa20d848c18c3b93c9da83efedabdf0998930a7a8643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidafa-fariaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c5ad54aa67306b23a42357ed2e80a76fff78619e2043a8a81d09365e7646c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafui-datahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb2d862758bc4b17f80ba019ff7f3162148ad83719368c49e7af415a7213a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkiaanr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0026cc4fdec1390a91eb56fcbdd4ec749b8abced1befd4397fc50ce496331f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-sjdasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9569f3083d09e4b4f82817a3f50779c3dd979da9c31fc27bcb454a67df40afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174334 Malicious code in goodafin-nui-gibafayfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1fe690259e363c19602c4735a54c7d9f2299fa9e872ad4e9bd8a2991901cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...