MAL-2025-176668 Malicious code in nuilva-bavaim-madcvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf514051940d894f35fbbcdb209f4c5cdbc203c0e0bdbe45f655fa1243495f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173859 Malicious code in diva-bai-imbufabao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f00211b24a5afc735bd1b1c76a838b56b0521e730aadffc52d7111c1f5ee91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177842 Malicious code in polymer-avoafifa-fagssihagbaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b286227af420be5d15c60cabeb0f820bde10f33a450922fd049ead3c5e77f814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175095 Malicious code in kapio-samunu-mumadadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fda4dceced5f391a50730feb564f2ad63a7f2342f6b932e4663b2b38e0de23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177528 Malicious code in poglymer-ognboah-agavofagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4da536623a3c265d8b62cf8cbc89e15a70df8c53595fa45f34e0839061483fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-aniun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3016b52e4fae821ecb06383a9dfbd52985fcd93026e09fc04967e720ffb741bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-saaufai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1ded79c4442b5431b4aacb8d19e61bb2aca236f172ecfa322be078f685de45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-miap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c171d7dd58270efa6b80a1c3aadae66e861c7965e6916d9eac5e9dbf03d307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4133c9df6e14d6c9dab9979f03b9fa0f8408b9813572cb44ccff84a2698602d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manuat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31eded59ea6b6bd82960c1d29d663ccdd320e60d4379361bca391cd7cb0b3d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aake-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6172a7e35d00dc9f2623e1c5bd4c53a2afd21540097b8466cb406118fca5c9da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-gagfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2e4a05e9e0834f53fe323a087d51d2175a906e9f42f74f0ab6b709003e5f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalakioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0eb7a97de83989093a4c7cc12611283010cc6a28f692983058a26fa6579d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951e22bb423fec98be2560c57e2d0e969db550395c76df4a961e8babcbf54538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457147ba75763bb8fe1b9025470155f1ac3bbace24bbbac57b0e0cd662b1aa90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaggafoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1abaed1996ffbed75eeb2b51183b2471e2d67d0828b709041c92507d273582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81fd739cb8751964bc9bf647d048e4481c52ea3ebbdc76a9955c1b4a20261e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140b98856a1f3ba237937d9f0352f30a9d20b4fa73e3dede89ee57ad288530ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00321c0118ea1ecf3792920e7122a3350b710b593b319402f68d733f960b3f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...