MAL-2025-175279 Malicious code in kapvino-socvnvi-bofafanavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baa15ef04b936a2c487f116e81662f39c6634054018f218f65f717b1aeba064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174537 Malicious code in hakim-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdae6faa52cbf89a63bddfb615805fe1692cd00bdb57f4b0b7b25c1d7716c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a995d1a6757c2d89c4c418f9cc1cbc74a342cf0837b45fea09176f13199ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78267d8c9a3b938f521626ab552a8281a38dce5767aa38d4f4879227b9806ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-kangtasapa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b798e24b9bee6f7a21a4ca69924eb80bc237bbab3824d825bb0ce3ad472e9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b06ad945503d45575b764a3e8f58cf85d7b0c1c36e11324b71a3f670ff98ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600f268cab32e8209105aa29f0b5ae1af0881115137ca24898f9dec8d7c67667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e44261c3d2b7fc1a0c4031b125450d40bdd850b61f8617c36eeefbbdae128aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ko-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e825bd5f38a276705dfeabb40a7e62ca31e9ff2cbdad2171d3c79f1a10bf3084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-rasiyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c536cbcb048a1abd0e108c12690764d8cc77e882b9cd459a11ffe1794f1a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyafa-sutiynu-gofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bd4395a191f8b90b430704ecdcbd5360548b34e5786254a70f489141944817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4c47dad879737313489b2dc55ccd260b06ed7a21793d1cb79555d9f9d0c65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiokimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257e63d6146f9d4e3a108c20db3583728bec0ec47f2841678fdeaa81f224cf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd98d931d63618ae1d99df529255b5862bea427b71e1afe751d4210cf9206a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84cd1d60076746340a2d138a27d6e47dea21daa74cffeff968595737e36fb6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-ia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807b7a3460ae82740040b9f0e910795a92b48cd472b0d9b70a6e94f1086f2f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imnaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74889111d2d92c694eca30e2d0fd4c1cbf09db1e2e596207b2893b60b50cd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danabufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b8fd9787bcf7fb295e5dde750e2f09817c1f326f43fb6f364eb79de5bd5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutuzp-putysua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5584d31b7c885c0276823823d44bae2a7de8c90ad16b20bfb445f80483f62048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...