MAL-2025-173591 Malicious code in butanah-fipopha-hafufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295a91161cb8a11c7452c3649a3c576a28043166056086bf68486aa037aaf302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173363 Malicious code in buta-fana-sadofagana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee1283f0267e0f9dd942d79f6227910efad0f8fb9825b8aa29a04625b8847cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagfafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16473925091256af5c05ec9e2288cb0f885b49a61edce54016972efa0929a678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-racing2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b8094e5ba133b10858afe5e1c122a4ff2e082d992c443d39c1c75cf159101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cdd633d6dbd4a5e7ad0785d92c538f6e0589fef7905c7a5b255a3c1db455d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bovu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d286f6b781ec8c37ef93874f7947189e6315fb0fc7e92235a24fff0f61e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdssgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605363d4634be7497bfc05b20c721e44b13653607e0f2585a5547fe663a3f126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-diabatud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40f10c06c5621ce6ee28bf3c1726dd68be399a02c493bd2cef459e5026a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba98799a98c948b26775f70854a8200dcf427e6bc02bd4b3c31cbd393c683ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfdagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5e7e26c592049cfc23edc5d259659f15341250a02ff34987a4483a101b8c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-honud-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebeb6745ec29d05e5eaf43c5164e4b37b68652d54b5c317aabfe7f9d8cf7cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189d72ea6b61e87dbdf7e2a2ffcd8d88ec984dc0c7c6b853d6bb4fb17afec4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646553b0dfa88b4a0781a8d75b2e613c78b9549e39eec6d05bf4084efb39e10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afafvbgdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1c04fd28b40db36732c09ba36509259bd5f4c2ebe38e7a2db2f95ca6023845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147e0f3aba7f6fd828532a49d4590dd17fbe27e008d5a79e49fa2c1261dfa0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afadf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0efe706012f672bb413ad0cbc12cdf9cd3fcce1c5873291f7e8c537882cdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9214268a4166248256a1e8935bd10a175fd84b7ec4cdaf49fa8dca7887ed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-haulid-mubdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0824c29ebea73303c7f68a40ff906e85368f69307ceabcef2ffd03be2a79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agavofgagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ef3132ffcc7e5f8a9735e7cc7d49ca90c27c91c754a3ea10a26fd8e83a706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...