MAL-2025-173905 Malicious code in diva-banib-imilbaiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04c8e7ee61e1ed858f862bf2ca2f2b521ad0056a1637687eea1c01d1314fa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1687af3e543d17faa954e230a96768b5d6f14e0c6f5696d958dc9b3670120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177797 Malicious code in polymer-avafifa-fagsabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b9c7eda63f5f6a1bad3872e11d23d8b067eaae0dd6a4a3f89aceba8e498c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butauahur-sofauiui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc423753e6051cbae622c66259444fb6e66e348cf529cbc5ce185df3646b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174023 Malicious code in diva-tutai-inva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d6ae0d8d77abb00597a58515f1d19250aac06752da8c725f848d25b0963587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-maba1adir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ec110bdad861206b70d71c507bdf027c6a1d9a50cfab9ee265d0eeeb1b4a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuagaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b3912ba0f3f0f03c2a758f9a65d111f99558a75cb7214ecdb66a1dc492be1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460468fac129db9229268e992ae5e7da102404bc1d5a4f3b5b8bd7e25b0078cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-sdfsda-trujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3794316088fed8b280a215527c653020640125c5a0fec29a3215a7217eba14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176184 Malicious code in mubafi-sunai-caai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8967ea3c427e48ddd0b785fb697841f0d922c88a779a9e5c7e0db316dc22e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nubafatuti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa819a1aca7806ecd578c43ebfe63414634fe92067c2cbd3967537ef8f4d23ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inappayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7510ac1651b73c2416f6f8a3648cce012f0b2ac20fbd23617c7dda3ffd6978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimana-satiub-nabib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c44a45894af7ced51f900d7c110f146cfdae5644c7b9ed570bb30cc4a59d69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vanafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cff0429e0646bf9bb846467497b534e37751b3eb47d5687ccfdf9ec0c98fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imnaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f340f7e51890e6b8458cde9feb305415563c397101c0a8ac827a300fb23c070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-gbfafgafaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30962e56b2dd23f17b6e81a6347d7f43beec1a42697f7c640dcbc3733ac49e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174199 Malicious code in godi-tuua-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b895e2b5964f2022b30099a798f2130c9fef772be81b1132ab01d2499bc2a847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisom-okalmir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e06255a2bccef5a21ca33d7c673d40956d8b4372578cbeaaf7e0083e99dca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176045 Malicious code in mibasdah-manasisgad-munsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0ad64e8dfca83437361fd743af62015b8774a0dbd1498ae9d741d510ddacd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fifoana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4af475ce325329523c28aa6e17a53f66127e2a2286fa0fa2526d360baf787f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...