MAL-2025-177120 Malicious code in nuyar-amar-afadafn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7a7044d2989e202a90606f051a203066819bf33ca4d2c2e2cc80456980d361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177057 Malicious code in nuyar-adamir-tbga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51b8cfc3df920d69860876437355cf020817c771caa420728dc00636fd4f5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177914 Malicious code in polymer-datdfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5138aa919349410594dec54bdf76d9b8d571dcfa917b899a2e18209c383d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-dabauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d15d5d345c008c70babe975d2994f5a93ee3a7065a6723a3877161c801884b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivacafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b03ceb7f12f0334bdbc4b66b4052e0bccad49927ef31623862e72ceacb34f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fbbafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eadfdeef628138202b59ca8e566de58bbbb06757b12de9462942b4dc205535b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gdodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac98307afb1feb6cdc081eecae0f1106c818e446efa535672cb9af2f12a7c527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafafi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67bae6aab557962a50fc0f325cd053119cec85717715e25ca215b33cd0928a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gafmag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13060c5b8d2929a41bb61f49248dc943822e0dbd818ac59c4a06b286821e674f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4d361a7437ca8f683eb680b5c2bf4e7832cb76175ba90c4c973bed70f6adb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb083f4de6cc8ea00b990d10d0ef88e4faa478bc34c5ca8ee73d16013aa3bad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f7ac2be5c0d8271aa0e619c362f4a2f306d20e90c3d704010fbecac8b592c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufmia-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8943cbf9d890b3812fd3af9b5e93a61283ae7ab2c9d5fd76fde646b1b654dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4badefbce101739efbadd19331591ba84407549bcd0879fa506490d2760994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13651cddb72d88d40d130ef673d4dfd17b3bdb6c26fdacaaec5f56b525b6ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afusa-dafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6993a281d88522449487ad1b747cf0beceef2fb80b393b515e61e3a3569f5f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40cbeb2aa95ed907f4a5eaffd77b39c241d3259251fa841375fe3473abb407c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaloakoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad342c18cfe8c1ca30f1e3045bf394b66160e8f79bb511e8cf4dbcfb58f7fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiiaf-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff9065ef371bbc2ea71932fb909a751d7f92cb7a3b5b78a08480675496e7556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...