MAL-2025-173324 Malicious code in buta-fadg-vafun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d19ed7ae9c012c84887c269f4f236ec1841f1374714a2ab9e7e643620597ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173045 Malicious code in anita-manahudd-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51062813b0240b433da09c9b1bb61c1dffafb11e18e225aedef36b475c23d372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174921 Malicious code in indah-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a417b90c66a6eb188e18aa86983315225b06429cce83b9252531905aeb9de83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175732 Malicious code in kupaio-kulaa-jia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12d8b9995860452ef94072d0172a7d6fc5734ea0206f1aadc3b73bb3991ce8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174090 Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175346 Malicious code in kapvino-sogdai-odgafagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fd95fe6313af7a815bc9245ed21e5471167ef2f315fa8c1a531bce1736fff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179366 Malicious code in unimuna-safiagiaf-cga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9357a60da085447950a97752db2424eb4e48242ea92b0699ef152970241be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173792 Malicious code in butry-yust-yutsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c8fc587098cf54fdea8d3a0ca77cccef4694e13b09a52b706c59f6d073e9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178464 Malicious code in sahu-satug-iaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b1a420724935c13880b8eb27645c311be3227ec2890266d0fcd9150968dccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178325 Malicious code in riya-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150d19bb87befcd6b3538ae85152ecdb556441f66e13c8051ed4ec215a8c4acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134e9a00b24dfdbf2aa577a8731007a3a8cda01630519646c971b34562b08af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiobuna-gioaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3523b27fe827cf2cc80dd1980bc90375289cf7d4a531f7fd9107931e239c49cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-olakiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bacdec319a553341725c1dbc1abb7b40a1074a189caf7e9bd5f32010ce8e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-adagadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5edc2abe734d47cee7767790983214f4b408ddd9ad3800370c3d1a408c158c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ib-sgahsddi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645ea4cd3ae454673d6671e51fc9edc945f596d448ecf85aab5fb7d1df12fbd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e372734ec889966cf9563c0f56a1da7ad16b801808c24673e007fa82a1def0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-aami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42b51ea35c16ec55fb1307474c91ed27fb1c66e9abc600ca66f2fccaac216a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-nafifaggfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ce15d63b4b925c7e34e834cbba959a12a1e31e1dbc479c6ef99d9ed5cfca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautug-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4addc90aeb2174e0c5257896988f7d3db00af9382803fcdd68864b1f5558cc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b2b35a3a5c57a8d122dc8d98b49d14638ee9bd5f528516b2ccaf5438dbf208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...