MAL-2025-176631 Malicious code in nuilva-avmim-rvosv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e6de3b0e2aa69bdeb11da09e6a6b95ab64c7527bd99aeda5f24242a851a795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172927 Malicious code in anidata-hauli-mubafli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307447d4073840c455ef5854d0f519ef73799893ae6a3fe89c4bc344093a8125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173718 Malicious code in butauahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68e228f7130d33c1fab1c30145bf7ed32673d4371baf6e3da69d040d958cafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-ivioaabga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94115146da8f64f08a053ccc3bc28d2406e0e60848c6fb37f4c4d21c8745e6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bunamab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dd08418eeaad14cae815becb115c3e0973f8799da2d8271da13fd83bd459e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d10f6cc67ca2f7332020c3b0df7a3bdd45c62f6da98f47d173f9f50f4eafbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-fdid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbcd40ffabc5edf72fed60845b63f7965dc54868803d8ff394e31eaef83aef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-inanyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f09caf520040c80dccb18ed8480c5295286e916205bf79f77d1d8c8dc15510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-ersusi-vert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d62baf10900261bfa4d290230805700d227436ab09a31ba8855a6640878402b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banobfo-imufaaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94f81c4e9992262484c0aaf0d1b4950d0c7a1a4b586c80eb1fda971ec3e16e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-baneri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af34e9a5945acf437eb98ae3f762f6efc598729cbf10ae82f662c7461c782af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afa-ratofafoafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512a812225f6d78e2da11a599f2aed8927a17c2a84b6f972adf7db356910949a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e9f36e8474ef22bea7839e1a827f6be21e6fe19fd3f1f3d56e43108a670951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cceaa9d137814604e6d1128cc7c5dbbb855db9d69c7a3555fa926a50f28763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03262a3fd9970b33a9919d2ecf307473e67a68dbc6abe45909f288092a820ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savihotn-sadfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aeefde6e106f50ae64815252a5a5d1eb00771850bb447c8894e6f03cc53a2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3e6c5c77dc8cbef5a487608ad4a99141066dfdca8f538c8f652786115c83e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-favurafanti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b407ff3afaa46ea40d452d336da4acc248de45409d298a3563fa24b0e273306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45274c528ac341b78a6bfa7431b9acfda26e78448d123916a9571452a97e4c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-good3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748e6868ebe308283ff062d8cc1e715eb3ca0c789dc4cceca1d48d2ea9e6443c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...