MAL-2025-175090 Malicious code in kapio-samunu-maivvma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e8e52a597f527f7af25605eaa0c817c90a9f812038fc9512f3f57ae937fd3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175094 Malicious code in kapio-samunu-mumad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236860cd6efa3c4254b55e2918ee328ca7b5157801f55fe3b3d9f91053ded4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c525902ab84ec722686e638cd7ee99e826076d2caa6bdcb2b15aacdf7c5ba339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipofa-ihfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a073bf663c10d1af6271bcbfbd386a78dd931f745daea61e2d0e5f272ca5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-ras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba876188b1edb1b544b818fa3225bfa99ede5995bff44e6310dc285ea0e65df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1383747f03ff57ce8ab3b876b8076ccf04ae8c45da5ac751388c71cdf5a27352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bed1bc90976ab61b23c8849c1536348ea8418c3d81b79cac27943ee93742f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurrrrrr-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acffa1e4063769950d17e7fa988a097445e89802c5d3ea732facf727ea07ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-memeq-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b67f6a4710b5a97b5087f97914cfeb558cf275dd15128d2b54dc53e196bb110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f315f3c6203e88dfefa369f8ed9361f28b31751946ef61fabe537c0ed621b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-afsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850a368b3cf413e099065545baefd04e6029b79017babdc75f21929fc61ee18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7025e4f606f4b6acd7c65c1a36fb5d169cf69deb0d52b9938c88de882a4efbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-nafifggfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f292bca541798cfb674f2d3cc15f3f16c790918ad0c93092e5f6d006894b839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gadif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92a8341a0221793df186d74804958bc3ded99c32624d569afd1a42f37cf4afcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d15ed7e07d907a6153aed5a77f98c9d1fe69d9df01c493c94f3f9eb0fc40caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaawa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6ab45f229d17a972af19743749c54b1af9fc3b92f70b3607475422d9631cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-darasifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd09f53f9531281f53a147470ee0b9ae52fd3ebb5d147ee62a8b972a82c64df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaur-mdagfidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e998a7f23e2b2a84429efdc1f6f836dee89a623e1cc53676485a65795e3601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-ashai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdffda22f1ad646a75d854cc11cf91d50c063b8fe2dae36a23dc0420296438c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satiagobif-naigis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111ced2eaa9064ed31e2e45e374338521f01eb32f667fd78470732e513ed38c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...