MAL-2025-179747 Malicious code in kiut-acg-avefug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376402efc3c6bff032d83a8e0a87649e7c8c76fae9915f980c8cb83c8d4dee82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179602 Malicious code in analuba-inu-nilka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16f383e0427514b3422c554e7c579e6d7a88d47d6d1d60d7506a8cff4a6ff0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180895 Malicious code in teate-thy-sonic-rodras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5011c07d1bbdca4ecb43c572ee1aad91b5a522c8afeb17bcc4517a8dbbe9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180991 Malicious code in teate-thy-sonic-turzaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f2185eca8672f7ce95d040beb33f02020606cc478163fce6f3927a86c512e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c894d36c394bdf584e2b9da47fee337b71183cdeda8c6173955a194a890ad8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3797e351f71e2685d3ff620b67317110042c261f6702ee03f980ac89472ac39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaaur-butaysa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1cd9cdd78be9de60697e5337ce28cf2ad872d26e65af7b0b7c70d43e440e5fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec985845ecc62e92d282e888a07e88fc8c211507f6d31688a479d6bc87b8bdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb833bc6da93f337f94efc8943baba1d1884289e2b7776daa27fffbbb39b24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giubaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff859f57ff6da4b54f7eb315bcaa335d66b00abe4598cbef6bb7e06de36db112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce3f49f9cdd41e74f9832b850f2f267809123c28a211fb796738c787ef40167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafayfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b92c23eb3050f68a6daa48281520bd9ed8bb59f66e8aed856a08f7714b5c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogofiagadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817a4471b709edb797ad6215ff80d614129bed64989d06cfabdc061e7a556cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gigb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788055a8312f5cb814cc5cdcc27a4a36a1f8501a084a4ff6d57c0a966dca9325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-ngsa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfdc50133607f21f5e5281cc64b7b98892df912d57c935703cfe204e523270cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-ravfonasiabsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d30dae5f1d0db4f566c03f3163d54d2407b2ede222b88c995daefaa2d78eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tbg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462b609dee75a373c9a605dbf03f0efd0282babc6c7427a850ae8cf045025281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adoag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857d8fa8c1fd3e6943fbda8c5f019c7742e81cd261ed4f973d4b00b4c7538e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avm-rucasivasv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2dfeae5d9812a272117c1e717225a8620b43f7aa05e94e6cd9e50f1ba4ed07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-redsa-tredx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dffed6a979e86e2bc82ea9806af4706b13ee8ad719eeebe4c6bae1cba64554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...