MAL-2025-173790 Malicious code in butry-yust-nutrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538ec4857d649dd9f18c7a6ab62094eb12556516126280c0f6f98635ee5f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkianr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00134f124d7aea49e45a80dab3179eca44fa2226769b2124dfa09e5c526db8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174014 Malicious code in diva-tutabi-ivabagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52b38f56dc6b8ff0bc92ea727407a192889b9b197c1a0bcc29462c7c33bdf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178106 Malicious code in polymer-tehh-trusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaffe35204d20eb657dd67aef6f1f265e4ad420610d74161feb0b9a6d152a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-anjian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc7fc39b09f6afdb5443ecccd6b9689b2dc9e6b57edb2113484838a474b7201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3701e5021809c7d06de3073c77a81b5dfa51b1b6d8b17814c69a0de1fbd527f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177663 Malicious code in polymer-afajif-roid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d06b50b26c47a77338a6bf9d92c2e1673134052422ddeff6bfc35fa3b43073d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-koki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1ed36bf7ffee710d9cfc80e9ffcc0e80625ee4f1a83d27149346aa7e91d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179148 Malicious code in thambi-yutrs-butsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b6d82fed2f148761a38abcc049ceacd12c88172a02a850baa965ded98388c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd40b0edcd3418d6c2368c217f3b8886e78c28d9b19c8bee67d6d2966a38ed0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trui-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-haulid-mubda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f524bb839370e23a3f8b2e9117eb82d59923ecb6fab32890f4393c94b2506bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-af (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e533e4a39d29ce12cb72789d012e5bc3b1924ccef8277aad8b771a6cb5cb1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58226b1eab7f8f322ebdd4c3710cffcd61f57c9efd301e111bda1d70f246e7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufafgi-sufuafi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed343ced18ea855edbce0e9fc68f35168788fe77aade26eb484d20c65cc7727b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-rofdaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fd259eea2fc0d4274e6b1bea05e716d4acc774317dc35bbb28abfa06c41682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-dufaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cd437c9842cbc2a6c71f438703dbeca093936f5e82d1640ed590b2023f9687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f063445b35750f510e52b772f5e670fc168d6327cffc492dd2b61d999ed304d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabaidafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d92eb6ef95b725792931eb706c0ce61fa556a52fb9a19470774ad380cf8c257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-new7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c3d2671467ad0221fd9c155a1cf37368c1839bc1d7d58eadeb1a43660bd07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...