MAL-2025-175729 Malicious code in kupaio-kula-jokosimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f196d73b753348b399f40ecb832d6b584b9247a52f565677df7bb00dee06211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177252 Malicious code in poglymer-ogaih-gafmag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13060c5b8d2929a41bb61f49248dc943822e0dbd818ac59c4a06b286821e674f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174766 Malicious code in hokage-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b15d47ce762e1f19aa3a96ccd8b8fef7983f6d9dbfc597752fd2aea3a5b1ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsafigds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adef264c8170348aeec3bd3b24070fd6b6d87e711c95f295e7ce779e872a036d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngsafa-nida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1be947505ce3bec26ecfa0e1aef8e9cf477f33cf8143e88c6c80fc35fe79102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-adaraamsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4650c3fd59a451fcf343f99c1f793527590a5e9fde29de20027e6bc4caf01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-ravosv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b63abdc46e41a842cde54576372f5bacdc4d73a465f54f93f4f7a1d0d03eea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favurafanti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e58d886a9d439bb726e4b56acad3c34946b0070c67c6acbf674f6da3502d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakafafswaofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e1553bd85c6b9569cdc3ff6bf8c2ee3bf9cbd8c77a16ca84f9fe7fa39e46d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-maimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6401f7f5d84a25aa05bd3d83fbb029c51e0b9ddf046d168ba5c38d21730ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gamag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf63f1893b22afc30b7c9eb5402b785aca9750b6d6e18b1b10d3159b2f62ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c7d2c4bb9d900b581e6444ac26a8e4ea67a77d8a4d3bc7c08e71d8d3912f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aifgaafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a921628a4925665dd8f8b2717a08661c2ed324babc1597377bbae53e91d680a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satsgamf-anujafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf3f046b4994c32c8bf8591aae89c32aac48ea0b306639ee5778ee313935148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdssika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e1627a64cc789e490dcd2c74c8f7eb988056795c7ed0ce3145bf939ffb0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samunu-miavava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8e3a3c2812428aabd3ecee55a092013faadbc6b47b598d8d0c11bce48d7998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5fd73dd943431dfe1495159b60041a4836f740654476c8a17e8f2403f6d06ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rusiavantinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a7341cd834f6724750d74b0a51d7a4186d86a0fa174e069f12125b361ed627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanuri-sa-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e92f08eb288153cd4b9762677bf8fe5b57339a9749bcdd8376a107a49bef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifgfa-rataadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f054f3c904b70ee14ea26928f980a3ae88b753a89f2aaa1b2d16a786bf066b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...