MAL-2025-173205 Malicious code in buis-masi-mabaafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3298cbdb8ad8dc83582f94306545ed8abd42b3ee1025c452c3808d30aed23dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178687 Malicious code in sgoodaini-sanuga-nutbagaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be274b8c0b2c4701074c4bdaa5960535d323fa780695034c542142d6f73f8963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c4c6cadfc42922fba40f819eb2ad5ee38de10b62eb333bd8c70d9759e5e43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gadaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3caf63c8edf54b45117abc1292466f42c2f7a48b21e60b4c42ef413512e0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946159206537547f91546e54893d67600e02d59a2eae838c27f35c7484faf3cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06afb2570282a837ebb6664e95ac05a6ee8de9c3698a342d4bb558f0aebdbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f395a0d1829b1eb84d8e0b32f95ff3bc203df35300f4c378e1ad185c4f8be81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-buy-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b599342ad2a8e3c2e550e77f14685e0a1e5a9ee423f41378cae33c17dab394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8b3ca1879c379d993458af9fef2bcbfe6968faf7fec8fcd67de7dd534fc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favavri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db44ee698778602551881e4f3c4b26d6bef6082dcf779f2f8af6b14e782b3484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurdat-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73a27a3addb135d3eed59f81482e5083b3c2e3fb4bf73dd1a32ea80e5f282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9257b10467ceb4db0311d8a2a0b921fd2214298af29c63dca9d610e7c39879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divat-tutabi-ivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d4f829d1819de546529ed9e29bfc1b10196d3b10aab9caa7b5fcee3edae54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9214268a4166248256a1e8935bd10a175fd84b7ec4cdaf49fa8dca7887ed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cfc5721ebbe173949fb74e161d42d7b2383b99a3fb6b1b0844650c828bff80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agifiafadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da092aad33c970ef9e57bef12b610588cc600a429c9f4243eaeba96e437876ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f063445b35750f510e52b772f5e670fc168d6327cffc492dd2b61d999ed304d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-ravu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c718a1175038520a4980081ded898e6083fb053a058c9f1f8d8c64eecc3573e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80a96f7703902428c8932638a50642d411729d792c8d610ba5def268dc3376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...