MAL-2025-178737 Malicious code in tanabufir-sai-dubatgifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bbca0717f2fbefc1444f40b0f72c02e187e20111f18f9cdce122f1305b967a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c7cdd6ded9086f94e7bf15a23146c63b851cca2a8b91826212ee985c741b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butaaih-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e362f224eee4c91f0bceb7759feff13a495e5d488059c977d2d2ed98db89dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1fe4e13522846ed5eb5c9124585432e6a0f137692b9e1f9392c9f664fad1054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f563b0bd7e5b0799a16fcc7a7ff62fc087398919af8ec2e9c1c488cc143dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-aviag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d887f6d9c4094ec8b85828d2c911121ce2643859c2dc4cdbf45c69982fd5643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafaggsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94fb9df623a4e75379d907171806746f2f2940460fea9cd41192096a577bfbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981a2f31437ce0d3ff04c65cf19d31a3df8cd8b2ef4056012105164a162c0ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-re (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24deaee11dc66c42010f3f218a3c6b60ac2e4375effe64ebef41f4d4cebfa508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6995bbab286da92d7b19a3654192e77fcb66cc3ac0c74e6411082008903a66a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tuai-inj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40416b778b3a2fd88171e779ea85f66c500d9c210126954fd6f9420be63c6c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-busrt-buyrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d1384dbc6221fe4a0c0780884dd5598b368af660e9334acd5a0a5d5880b97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-iduy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edb3c3fa379408fc03eec5bdf47ac75127fda6d054323e2df0dff39474b294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174112 Malicious code in divata-tusntabi-ivanau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38097e261963a8659df398b4ad36f42690364b5a093a49befa74432620481e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177995 Malicious code in polymer-gigb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788055a8312f5cb814cc5cdcc27a4a36a1f8501a084a4ff6d57c0a966dca9325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176610 Malicious code in nuilva-avmiam-ravooiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a648aab4ed7d2a35f6348c30418dbb6ede0eda196c095ef7ac6d72b60ee7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173101 Malicious code in bafai-sunai-cumau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69365981fe8f56bfbab0fc799580eb3410076d349e41439456e39bd65b42d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173820 Malicious code in digo-kaimi-liabokaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054efbf560a988914435a4e4dfcfc982a3b39f71251a09d75791c68db34cf244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176560 Malicious code in nuilva-avaim-rusiavantinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a7341cd834f6724750d74b0a51d7a4186d86a0fa174e069f12125b361ed627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177868 Malicious code in polymer-avonf-afbofafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3e312f1abc8dcce416d3b5128888331c3854310c1767a12e3a736464332de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...