MAL-2025-173666 Malicious code in butanaih-asfi-diaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e6aa9106fab7e30ccbcb6f84d505d349dd2bf6750f06600b1b0eba6e5120b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174957 Malicious code in ira-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74266befc986f47652eea441a4a62984f337e202399f694cf2034d87563af1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828bfd125f11b1e29043be871c2f13cbce6baa6d694c811749d41b5707c5b616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satidfaf-favaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7678a8dae610d2ff783509472d698956267aec5c1f0488c76cf2df2d212897c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f06c0022e3e3a990dd23ec84402398f70aff4f83f88a73541e0c1d0486882c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresfd-teadteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eca7cbbb7c275d5515b76890a9fdc3c7324ca937d7f1ff951d5c1e7af911aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodaadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ce8056cd73af5004dfeb2d7c4a248f75f744bb5db5ae922164df181270fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodain-sanu-nubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e949fbafc81f1562231db782c75c58441a923ad5301cfe3e92ca15ff1f53274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-dfifif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ee7d29ba4b380e3c405066f82ed20c77869f777aeb666ef38fc2edd0715b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogngh-amagian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7b561c2317ae8177d01c4193fbdeadaff4ef45cb3fb36ea5385958aa1288e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2296f7bb60518e396ce9d5e5ac2396ce855027f6af366047408860f99360985d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470dca2cc7bc4be8bc7566325d1b87239b9f538360edcaf28bb4d584cd7e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd0b55ba7b5cdd1b23b0d8e6ad9105b2e49b7c2563d61d2dbf29381cc558f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nudnif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f1207fb8dc52d423cd07d838794563caa45e69c1eef4ca3e68f35e66fd938e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mem-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e98442562c4b001550ef675f92b87705d6ea5a60729dbd7fd26f957d8247bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faa-saiiaagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dbebd899673b5b7e5b79a1135fef389e316c63c3c84ff27e8507c1d95303e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inappayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7510ac1651b73c2416f6f8a3648cce012f0b2ac20fbd23617c7dda3ffd6978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafgsffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f0db04b06c7fd4afb67b4c627806a7293bc62c457442601bbebffc4b5e4b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mdadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a033801ba3361455c14ea7d93487c896376f49ca4f6ed75a8ef1bc949ad7695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91242b6f8e2d3a3e3d9d997b0dd5f436815f912c47a64ece90881e1cc8a3ffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...