MAL-2025-173359 Malicious code in buta-fana-sadofaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b22fa6353d88e725735bf8586d9e69f4884f67ebf83985b469b031055302a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173757 Malicious code in butry-mutuyyu-waegressur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d8fe070cfbf7a4c1062e691a101170ab89cc734042e7191feadff448fbfd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-goafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278144f5242cb2646164ed63a8ae9d4cef40edcda53a84863d3ffea20b43964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac12572c2d3031418d87ec7b68ba4a9ff04a7df04c7d35fac0f1923bc1112a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17836f53d27b300f8d078df2a2c7688d828f15c6da3c68073804cf93596cfc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabidan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af777be0cfb9694951110a242886614f947480349606728bda09169c7cc20e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sugoodaini-ngasa-abainu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ca0c35a861f7e0969cd886e839129611d410c895a450af5ac051cb6c4aa684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iafagugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e334f2619b984306c1497c95a4e005d464defeae23f4b889dae24d65a9786c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farvadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d9eec3c8383412bad75c82dfea73ac69790d96b0ea5bc2a6438d1b569950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-nutus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a17ff398e28b2ff3cfb532ef6dafe7d236c9a7b43123a39e121629521f759a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvvafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1746c158ef397a5f1e6a3e2801f618cbdecbed6551cb20b219755430173ed5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ana-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd632e820837b776208c045812dc3d4830245590cc487e4d1c0f0a79cd865cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoadfifa-abohdoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3385df91a1f3a34b519da69d30012a3d8cd0c4ca6749b5a51244e9e123665fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7af186aeaa4c6e3810b46f2bd4d7b5ac723af46e08a8a80ee6b9ee26514b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-did-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29dfa6320c9feece58215fd76757d813615768883c6948f883bb22dcba74bbba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c623314a49891539393874ef37feab91da7ed0b7608a0054b72e33592a8967c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafi-davataihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a1f9eb0183cd139fef82e2b30567149bd931edb524a73bd7a6624db7e6a1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56546bcf43f53d499079f74ffc8162ceec654285e129fa93e28630f43efb1904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-ratao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944062e1ceadd396c0968c90f811253c1b591dfb649f019a580e5a126aac04ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rsva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b515b6f3ed82ca212984df48204484b93102742bca6085bd9bc0f7a70ee3b49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...