MAL-2025-174861 Malicious code in hunimi-satihu-angafagiufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd07af0770fddf3fe011bff7af4d6a8cf190893ae6b020e4e9c6a09e44d8a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177572 Malicious code in polymer-aavof-afdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea841ddd6d18958cec52292125e257df69e8c311d84a17d7e5a01d1293ca36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179259 Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8836ff91b7a12090c7aff974df1a9e1781fd659930a1c1b2e602420607e9a5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b9ee0fc9e8ef55bdbaab3c747481a5b97caf841869f89f79c176919078eda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546595a318228c8cdcd08a893f6ff0b827c710891520dfa99cdb1d0f0955f0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53613763d1d4fcd557a5bdd69b2ee8d49e77748cc59e1bb36c9b9abf4c99aad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutiayanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d7967de0e5d42dc44d53f42174283a413f20edc99b4be625fae38b3e1120bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2140051e0f5074c3c46ae4cc2bdf7054401c3f86436df605331b8a66a3bf5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d7c690fd4dce5a571e1edb1a896f62a3167b827954f9bf8d5344fb18acd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4088aa58e37aba819a33b0e86537e9ac673f4851dfdaa740372a403bbc4e15c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fafaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b79573a651ff01f8c4837245c9bb515b0b6db9a9b72a3f044259d9c556713de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajif-roiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce6e6c800add7a8a86b4183a48902af3e6c6b02de21e21509a2ceecefec42f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-ersusi-vadert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99269fb9411c8bb445a73330493a2e262e94893acf850d9a3494b40e42f94a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f51239aecb8a81b4a5e5a83aae21145d6f31beab3a49921df3b85010fdb8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diharurfay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e419b6dded021774919bf4fd1bca8aba79d3c15628390625cf11039c01a8603d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jiaajouaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec05b7aa85573ee6bb2afb4ce4f8416e531a2a375114902941621562346a5f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-maa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf764405cc2df65945a36b843db7fc53cfc264287ce974678bf3fb14dd0b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tunabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5a171c0bbbb7c7fee721c44c173269abd8ca467bb55699a28b9a567f63e7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-manaado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc375e0e00dc268fc6a9d20a9d6a010c822086482615d3357529b51ea7ebb5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...