MAL-2025-173638 Malicious code in butanaih-asfafi-dafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a053e4c2408d5158a51334417e8aeb41698e2ea5ee6e5bd1b2d730279dad16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175377 Malicious code in kapvino-somaggamoi-ugafahagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c065068f3f855031c3c2cad9039821ee4da81dd1cffd53020ac95c42ece1e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b42fb382f97228c62bc2815dc3ec410d63fcfca2dd328ee8b22e448f28aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gaaioif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9dde825cd7c597c4bccc84b778d9f97ac8e0b1b9fcab7b7bbb7364af5f024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasg-fgvganda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3e34989e5335e2466599d9e258a02faa7c9b7c01b3709edaa7d84965fbb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173321 Malicious code in buta-fadg-vafgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9263b0d1afac10e6bc832d01e5647b6c324cd9113036497fb67edceb089f9e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178996 Malicious code in tearich-racing2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b8094e5ba133b10858afe5e1c122a4ff2e082d992c443d39c1c75cf159101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174471 Malicious code in goodain-nusiauta-nutuaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fe619406740611f7169b4334112a8bb8e9c7341231d48ace9a6c65354c291b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173499 Malicious code in buta-fs0boiuna-gauafiooifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05de303d31f1ba4cfb7fa51d0a20ef63c95773f34967fc32afc4a317547b7def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rusdi-sety-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86c405e1cc8b564c49d698267e4cca764c03292b0d51f54474da000874ae6d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ddfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c12b1dd9dfa683cbc7c1230d58bf611f3a330e04705a41b7be79563498dabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-aiforxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00beb004d2c44837b7feaedec8e4c7c47611b649dafd0a68cb836f25c125a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afusfafi-dauafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da95fe2ac67bb8891ca1ae83f4d551b6498f5c970ea548bf757ab70af0f8570d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-abafbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba9bfecb22c8751e9d3333414f9d535e3e9675e80b3fca739684550de1c5cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d10f6cc67ca2f7332020c3b0df7a3bdd45c62f6da98f47d173f9f50f4eafbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-angifafafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1347756efd2387b523e24d40d195c2f854a7a876fb2d5018f97b971e2190b6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gafhsgai-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51eab7eff5632d82dea15ffcdf5f18ba502544dda43c9f97dcb9f4aefc558edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imnaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f340f7e51890e6b8458cde9feb305415563c397101c0a8ac827a300fb23c070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-buiyd-vrfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0c66215c66f343a61a18dab00dfc22e4519a243b6632121450fe9332dc6a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-buyaitatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce73e87bef04e0d94ceb10b6909c4d54b6e046f8a818663fb8d740414849e85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...