MAL-2025-175275 Malicious code in kapvino-socvnvi-bodadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c5941530280809ca37ac109dd1f6e10f464fd338582f43253ecc8dfdba180d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176339 Malicious code in nokire-kushina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7a09c80ddf619931d94a086524adf7f2e13fa53bb158aaf41ee09400f967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174634 Malicious code in hitachi-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb6fa3afaacde3c664121850415129dd4544eab9413f80c49d71739c937a828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178887 Malicious code in teadod-ri7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fda40e6b0b73103804c753050768315bb0757d9b582d6b53006f6b23a9c2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofagaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a93eaa982f85a16c2fca1f2f62d73efc5d2aa6c8e25320497a6684ca62d0743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakalokakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f61f11a3ccc7194bf4380088bed633949fae86902fe334b0370a341f20864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gidggaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16f11ca63f61f7e664dbcbab2db0a06aed9a175a653758274f8c7ecf8cefa12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodassadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1f2916eafe01e2382f972652f101435d3523fdb6b8daac6a42a5d5ed6cbba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucoposivosv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d833f9ac21e5bfa663f9bddf0c9966c0d1323fc17f4e3b9698e1a5bb485588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabiu-uafnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64481b287150a9ff304dc5f405c7712f509138182474e2e6d54af524c02c7b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samunu-mmdadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e6f0ecf48bdca4a42a5f431b402b5f8414ec8764d8e9f2eb8560da88a08df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafni-cabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7979dbfbe4b709c164005b0ae0639273110cb29809a4ddc02df530ec835fefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3db47b915cff01f2d440eee18d3eea2833a76f49ec57690be12247daf751c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-musfngi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb09c2e43588785892ebe376a42ca7d5a63053e7b3665c11bc7cba1ab984ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf4624cad06b483f4e268174353bc5e21b5167139b873c10c87addd7efc061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd64a06050ec462762d2d3c78048f1e045178a6d76ee6d2ec3d90795f9cf7477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datddsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86381974c06cd7d2735d53f42052a95246bf65410d673608d62053f0d8a1acbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-faaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0acfcdeeeaf10a407c8d03a9726d2ce61967e56c14f59d53b6b672b7d7ca03b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-sufaufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c66fce9e30fb77f02447758fc3a7606b1046b77e33426c91611eebd2bb64258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-ami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599504053a22e8e6443da4a3c5c51c7c24bf531255ec749ff10653077b8ebde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...