MAL-2025-177108 Malicious code in nuyar-amair-tabigaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a7ec6c8efe86ecd55a5a43e8ca0dde08be0df627c6285bc4d9a5f142fc3322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175937 Malicious code in mahiyaa-sutiaynu-gano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9c6dc7c3392fc111161989ccbfddb5a275ed9c913d865e6e79a96550ecf4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8b516add86b47757da06733d478b85ac6f419cf957956a051c8dc4ebd5e6fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-sdesasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6235449b77dc1f2eb8f8250e111539fd27445edb1c784abaa02f72e76643f2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abah-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84bfed99776f0dae008f103c420154349b48f9277e955b73a3c35c1b39f3fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eefa090782e8e033cef36d036bc7dd2cd25f4d0bdb4a60a21e67c9ca135088b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaiso-ajiobaniolaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673c04061e982acb8b41c468ff92f4ae89fe55e1b009b60e93fb6f27f970b3f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutry-poiy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91082ac3cae4e474f8c6408a01604ba6db6eaf844c866d4a68b44df118b55881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693522d4fe50191ba162b567b2f626addbc570cd1998179f912c2b305e5e41be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-dihaurfay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691aa11d82a4656651de8f1dd6d77de1bd5b38cdd6a9b25792e25b0865da2004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nafuiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfc242822257cea72f1330ac4447f78dc5995aee1c8c202229025775cd6b867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15ebcb30fb7955e68a075d1789a11b93db04ef9e6b4e3d5806059f29e3f5bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0de33793c64f57ac3505bc36e50003f471d7f2be2b8c8d36dd66bc4706ec8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-ravzfgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490ba66ee264bbca5fb1953f53b79f50b8734e874aee6357c546aeca259c53af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3485fe21e42d845bfee181f788ab26a2e5b369c4eef0b03a3fa3ccf92a9b5cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagfaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110d79deed59a9dc4e2bb5a73df03d272ed7c22caac1484db91d2da965562891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamair-taqaibbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b6e3c5caa3685379c145995bd15f8e402253ae55cff21d8831bd01cd5ad2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974409dbeccb3a34a8d155f9d5886f37e9bda76709eb4160bd011dcea54e3ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-good9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb9cdec0236b396e6aefb7b9ba6bf120dfdcf541d30a9eae868d21a5510605a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiobuna-giodaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c63867a3eee6c3d837b327766615eef4a022ad8f09bbd27ae85010eb7984087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...