MAL-2025-173489 Malicious code in buta-fs0boiobuna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c63867a3eee6c3d837b327766615eef4a022ad8f09bbd27ae85010eb7984087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174039 Malicious code in divata-tuag-iviaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8025714ea4bb0243b564a1eb3afbf152b129af95e959361f3cac7172ea2b47f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c50c9631c4da1ab18c750eaedcee0be6a2e82299dd1b98f3f4d56f653c0e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319c238258bf65ed35aa1d8e9874d70bd3732b9fc98504d81df08da41d88d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satia-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f72c777b4776325d93f80493965eae4ed4d203d182169cb2679d60488078db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee891e0db4b21ab22e6dfdfee333d319c16dc4134ea9018227aaf04f4baa2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimi-aiokoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5495b7ff37f9c6127675f8b50cec2bcf5d5d4e5d9b9104673d9bfb7065f7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-agaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65606088704655e643b8ac706cee3897e996eb3a2fa4f400388e1cf9545736bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-adadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa077e626f189f70ea376feafa9dd7407d85070ef660eefe0f50d7c0581c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd98d931d63618ae1d99df529255b5862bea427b71e1afe751d4210cf9206a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9d996224353f6e1778107f719c0024707f240d65d28412befada48360fa7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-mem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcde3759088b77d57f90920cb6f1f816139d5c49f056cc9bb6b3cbbc8b8165e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafunhgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289eeb113b8a73586006b89e652b7eaf95e1c641ec4e00fbd54d0ddd965bef43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2ef1f436d1b9d9fb9bd4903e90af76c8cc31d5c3d1d446d549e4307118d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f89e6c4d589cc26a6c81b83a0a6d0c248d35a6123d122185fe7c9486866ad13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhaghsbo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425f66fb02e17217d35bfe0711b13e6f8c837509bbea10b16f0c94bdc106728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butamanam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5063935f5b855adce73798eeeca106ce8a50740d2a2e70b1566011c721d2e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaf-danabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234230d6ca9a72313a64dcddd488a4d1a3f7e5208f8cc76e4013bd81e0d69a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf67b3537ee84ea2c7c238644600688e255d1215709cfb06871e1ac1c41e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imunggsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7876c6dfc2346864cc4b870db1615de7db7fbafe629cf5da7b22712b2b01b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...