MAL-2025-176778 Malicious code in nuilva-dakdre-aksogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e554eaffdae5c0aa313702159d6c1e3e1b6ade902ca27b0797a6675a432ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176882 Malicious code in nuragi-sutafia-dagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73e78dbfd91e81844877f425f23e9d07014a1e5c906877ede19b710dee226a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173514 Malicious code in butah-asfui-duafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e36e15534fa083689a1d23c283a23dd48e94932b6c95306b693fdedc2deb36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174726 Malicious code in hitachi-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66032abe3c6d72493cb0d392c60ed13b27ede63eadd1f679e5ba16b2b6990ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175203 Malicious code in kapvino-socovni-fafgsfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a338ff772f928275da58cb8bb99a6319474497376e36f3cba4bca9502eb244d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63247c0a96e0f78d55d9031e151095838048a99c6ca6919382269115317937aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafiagfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc393b55007d5a5a95eeba455f3219c4a8758587fa30fc48d53beb36f8973e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-hali-misalani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc9e96078e475c7fba654d8071af3a8b0e66a9f6e35d9b1d5a6f0e6a1b7a0b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-afiavagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae60ea6f7ff73a6b0bc4857aa0073a192849fb1b1b4d60a323fb4a98afb66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29f3f765e01e504250765dd4ebdbbb2905a5f988e497cc5fda8a57b7c0288cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banibo-imifagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ba7cde1ef45e8d6472b7899f9b182571f69957231d51f25734a55f4f9f1351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-ripa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bb64548ba3e4c45860d59bc491ef203b1b2481e7ac0ed721300d32e49e8ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugfai-imag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6abd3914c3459f44b2f1925a2a73fdfb9239905e24d6fb187b1a084f64b4e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-kangtasa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b5328272478ff28ad5d00b08a6f29385717f7daaf6317fb2f7f15696b73f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c50c9631c4da1ab18c750eaedcee0be6a2e82299dd1b98f3f4d56f653c0e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bai-imbufabaamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a52582671a9ab9de6b44170674f96ea61cb98f8446a49d8d509eabcf0fcaa60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-pzp-putraad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def70595453667f13b8778ed51c73baec38dbcbaf7c360d0fc94ecdbd810acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554f6b66a84cde02d2d7c05f7f68177431f9b029aa00dcbd56db457d4e068e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...