MAL-2025-176755 Malicious code in nuilva-dadre-ahkaognfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9804453927e87395bed7a6d002055758e4c0e9559802323acdce0aed4e0804b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173491 Malicious code in buta-fs0boiuna-gaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4797eb0a1a773c2bd83c6983b456430beee67a29b775bd847d415cd523f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174666 Malicious code in hitachi-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78212ecf061c6e73975fd6f9ff4c16ca7b12e21de8c62801eadd131ba4f79b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179038 Malicious code in terui-umur1-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3cd38e05a6bce03961384b9cdff9a9684611ddac2c6c43d5f24ddb291bc04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afoffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c84c17d59f09d3cce7caaa6323efeb5d117cd96a76cc268cac0091315d1117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafi-ac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4321defa4c65ee9a7aacffb3576a9f313a8994296f2579e3d6256bf2803654e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-sadamuda-mima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfce67d4648af18485ce6b070447436b01bff9f65f4e4e91a71bf9a635559f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkinr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d722cb23c5b70710b3e25870348487b1570c750271a96a7fea7750b0350423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsaghohai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70279ce2b7ad65980835274baad3eba75d434eb302d3da346b8facb6fb525f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d561279910adf45252e4b5256e91168fbae024794936d9b3931edaa70e5d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iasuozp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a1f529f7cdfde087ebbfe7ff6030975e4b65620a69f3ac2b80409b2d4387a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-saigaiagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9b2292cd4bce64b371a4ac6d6d3ce039eb0a3058fa3ded20675cbc1d20764f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1c40fa2eb37931cff63cd1b7892ea1a6ea943eb38575939b6cd59cf530ee9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajapanoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8dcb7dc295e81c2d67d1d4bcc798f9ffdebbbe56c507e2b8cbb6e67cb4a73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buyavad-manha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52405856ca6387c6ac0511f62496f5eb64254b2a3ce74fef3f21cb2bb0da341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64c36767a63819a3e942943fbd25a96c69d2adc2e1ed808a8f1e3efadf46f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofagfgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c775c1af1674813232b01153d30a8776a871165a7c02a23873fb7373c76e5f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705bcd27d44045b5b24ac16331dc988920bd8ecac74dcc53bf6f2ec5db00f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f1173e914293848277dc10dd55f818e7011f187015e39d1612aa37e46a612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...