MAL-2025-176781 Malicious code in nuilva-dakdre-aodoanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5aa6f0b089df28367ad39f3e348d36e3f939e9e97e6ff026f1289e51d265b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178514 Malicious code in sahuar-satidaf-fbafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f943ded04482704e2af4f1279f61b49766e4ed64ee9bb25592c6d95a0d76fa57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2a35e628460ea35948fe6b9d029814253cce249bd70459f9d1db895b0635e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d30c1d046e2da33f5064cd6aebc3a53d1beb718396176b188c08d3c9777331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-famabavpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce5beabf2fd622f14f01e01caae8f8c1bec2e34f0c1537b212da5bf4bf99596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c57ffd6e9e45fcbb73c7c390d8423eb53af962b5e6c7a1add363d187aebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-ammfaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7945570bd45d1049ad694f898c0f348ee960035e113ba2aa8b87bdba0b1ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-agammi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e28f7654891b197d44424ff52866245a0dbeeeb19f6d1aae7b53c7b9257577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosoganfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc4fd51131943de3f6c9ab378629e96359427ffb42eb4e404f90e5a362d9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4812eb0c44d4314d8a4ff0a2919e06864a630872280cc084e6362638d021853d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf67b3537ee84ea2c7c238644600688e255d1215709cfb06871e1ac1c41e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd98d931d63618ae1d99df529255b5862bea427b71e1afe751d4210cf9206a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef50e15cdf53c6dedc610fec50cecc627ca1c8f67a6001d44ddee47079e9e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78267d8c9a3b938f521626ab552a8281a38dce5767aa38d4f4879227b9806ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad2b294404c7f936b697c1ebe5c76ec24410372306bfd4c001534292b358619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhaghsbo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425f66fb02e17217d35bfe0711b13e6f8c837509bbea10b16f0c94bdc106728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutabaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acfc27b966e19fcdedc60238a5b29a113fbcc631931f600d9fc789cfdc5d1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fabasifaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d6e26d07096698a916e5f8454d6c05a777bb36f43fbbe3df9398d39b770b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f1173e914293848277dc10dd55f818e7011f187015e39d1612aa37e46a612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...