MAL-2025-176389 Malicious code in nokire-kushiya19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb3ad028b6907b3820a5f28f6c045f3bb433c02ad5946df217b11f5581ee981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafifagfofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393a0ce7a7a4cccb09a1aab3d550c1718bf295d00b5dc1b6c6a244ac88a83ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176049 Malicious code in mibasdah-natu-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa0ea8261b7d886b41c8fc3ce6a7b53d1696b9753c47b381c463aed330715a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofafni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657da921da7a19a1b87a7722a4a8ff374155c4cc2be49bc49999e5bf6a9b18b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47372bce5ce26118705676749e75a346b4540701654a4251319a0aafe4ef1ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-mass-snuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60184f2277dddfd7c3559bddbee8c785a7590f818e6a8cd855ed3404f899a169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurai-sutaif-danabufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b8fd9787bcf7fb295e5dde750e2f09817c1f326f43fb6f364eb79de5bd5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c413f5f9782a182ef5e24ae2aaa14b483dd80e4900be2b844a84f6b048ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-avg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dabce243a39ce99ebd978312bb2664c8e52ee96b9fbb9ef2c1fd6dfee457d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca9564dd9849dcdc1a09d116a31e9f235f6c71ad5cf97ee811b54271993d0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdani-gagofafagfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5989f694330ac641f6bc356802a34560b47ace1f8c732f434a074a4cc678c65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imungbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3916dcaada7df1a51751e65fdafb32c9499c26813ba1539fa866e5f16ccb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fvpvavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656978cd0c2794d12b4dfcd69623fab2f47137669859ec9ca249abc282dfdb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-vas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22d0f08eee05b41c5123e15694885a807316cda4c4c6d5ef97665602ab3f261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dea51db246cb100a76ce5e59eb5c830ffcdd280b93634273edf10ad5887e0a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afiafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfdf62bd2d08c6a6d58b61bb2b24f0e9a360c2562b1d9aa1d5e8e4f13338df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e363547f417a2422fe0dd24f048dda31d8cc46f2a05f193ed8058a4ebb67c71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d005adc004507c3939a1defa0825cca618738fdaf7740e3563f6262de0d213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomagiabafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3d34de171900c706cad35fa4e068912923d9b327b7290e3bf48bad18ddb02e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...