MAL-2025-173410 Malicious code in buta-fbona-gadfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659bfec906eb033e041da9f48caa179acb9cba15f6769a96eade486d2445194d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174551 Malicious code in haritono-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ab3c01c478b22b563a0a0873996760e5815abf0924d2d70f2cdc54df2060d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-gfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a3496c46ea8137bb05176878d81586c6d5333b30b3d33459c916bcdb3107c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-sraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b415c46a22a73494e64c85cdf7da996c338b7f7428f5809587927459ca6450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufja-initda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e01b4aa18692fdc8e2a47a59c37a5e42245a961ba37385cadc46c9a903482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1410a8a98d25535da896ed21562b0a225a5de0d6571fc5c66f21493eced9be2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufia-dagiagug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fabba1423f99198d45e85d5a1aef599593b527650a0288d0d7e8ac4d268e721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88de77cd189961f1e53a1def8ab0b82b18c6b749d2066ab6444b78a3292b0270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaaga-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1494ff6c654646f8dfb78ee7c98da5bf180f6563ff3bd2e27bba1a2dee250dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee433b88eee606e8bfe5dc692c3522855d2bd85ecd72f5c02453e085a35c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somagogamoi-faagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab1ba177816f60a241d62d3c06d8d486a2676406139786dc454d99e5ece005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612ac05282764393f485f2ac2285a74c9c0156114dad4d519fcc380a81be1741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ead12277458a90b94368920cb726bb720db3c343b150c94d4831a9dc184802a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176259 Malicious code in namacida-minuday-narutipafad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3933c0d32869587460ab5df052a11bd47c3109ed1f7449d47be6e9a6b517c37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175213 Malicious code in kapvino-socovni-fambvpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014eb20b4647659e59bb5dd206fd7fb685df1c3d4f5d79773fa90ec1f13f0a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177407 Malicious code in poglymer-ogmimh-amamofaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec12594df85d8f17015a98aa96d3321d40d939b7a4bf92e73ae9e4d3ac3474d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-nafigoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2236bd8376259ab0ccf31a54483b98d3f7ab9b72f2c0877a511eb184b4ba31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tuag-iviaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8025714ea4bb0243b564a1eb3afbf152b129af95e959361f3cac7172ea2b47f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175661 Malicious code in ksaki-kaisom-olomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712d1385d88ec91f5f5087917d32a126021130dac291f46b688963c77293a9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173174 Malicious code in buis-manuiais-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c0328ebe14766ee0836dd9ef3b6afc63bc4a4779813c31be65206a04e5a6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...