MAL-2025-175123 Malicious code in kapo-samu-maima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7e3e7d2283dc71812420c5afaa766ebc5e9680fcbdd2775d436f501f8964b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176944 Malicious code in nuramagi-sutafia-daguag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1da35490ec5d986f766ed18589e8740003fe5ea9b1150209b9d9508ce4328c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176250 Malicious code in namacida-mintuadady-kasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1a4c1367ea6db32bac82ba9c0b1ef592f85942eb91b6ff96b3578a9af10f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175915 Malicious code in mahiu-stu-gaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc321993179ad37827ac7a2a0ab6447c0b80bf26ffed41fc386952121f5a2bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177697 Malicious code in polymer-afia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb46ea62cadf53033514053c49ca9a192a41444409e33cc145e674194e48f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rofdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0419cf7d20b216cbeb023c5f2b2f97508856c6c782657d3200e57a44069cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutraa-nutard-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2b2e9b0ba388a1385b18ea4802ba5225c8ddc854bfe82ce136105045a23918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-duaiagufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961a634b5da3372b3549b96675a7042c15184382e4d27c398ee612801852e562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaabdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a5e733805bc24d9a21c4278251983e46a45ee444adeeede671dc444ab52d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-darasifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd09f53f9531281f53a147470ee0b9ae52fd3ebb5d147ee62a8b972a82c64df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaur-mdagfidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e998a7f23e2b2a84429efdc1f6f836dee89a623e1cc53676485a65795e3601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-afgigagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31a730d42f6bbb4e086b08cbcaf409d456bcd9044d1b12960102e63ce3e5de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kullaa-jijoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d2d82ddb040adc3772aa4dfe17243f9d3a9364f4d0685859d082d3c5abb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuidaais-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5324a0657b1a36bc7a6013840e8ccdfacb9bd54e29b2e15c0f6f2565d093ef64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485ae29e4e99688b9d13b3e53b39aee4b57a49730f2c5a7f200ec1222f3c3721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e227733bb1b804041553f980927657a110528a0829ae163d40a3fff5329b8d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngsafa-ni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d063e9e98a51ba6d2f1530253712798c7a9d39cb27e1982b03146d45d470775e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-uubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9694ee19a571ef05321b76237f8caa645053b787780d4b567ea8457eb4f403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugab-ivaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f97a29cb5ac2d82d6601a563d04c1b97452a3b4693131e2cf2b2b21520fa84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-adagfgadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19626de27e051623e6cab0ce33bb59d227a656e591fa2abde52ddc44dfcef900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...