MAL-2025-175161 Malicious code in kapvino-soafadi-vnfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077b5b29d44c3c568ec772771a0b980b01fdfa3b261732770ead0c45b8c8b223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810bb22a3585f9efff4bd077d497271517961b3e7ebc3d409ee096aad47b33bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nutuygagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa94de5626ff350963aabaf15f06b6c31bddeded3571ca102a33d867c6318605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-mas-maaidafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1cc0665901d79991a8dbf77d829d32a55828938f4c0f056bd479350b8a011df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175673 Malicious code in kuku-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d975061f27b8337b33ff4b5c3b868c67a341f69a255b24afa32f3e213323ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176774 Malicious code in nuilva-dakdre-ahkaosogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e09f74770181a7118f8fd1a10ceb705291959eb6dd131ca5543a33c56a646c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177440 Malicious code in poglymer-ogminmh-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91242b6f8e2d3a3e3d9d997b0dd5f436815f912c47a64ece90881e1cc8a3ffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179098 Malicious code in thambi-uyte-budi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db64906fd56b1dae8e23f6d7d2e4edba9c8a932390ddb413794cbc12a97dc5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butaahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9614fad06c2978226a1f73421a9dfe0e7d91280fe51428d1bec42bed81cfca3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8affe1286dcd33992c5dfdaefd96ec6928fefa2d3d0712cb65fe38027f18f0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-memeq-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2d48bc1995f2455498aa542951fa57f0c8c8b2906c27dc5dc83b72bb1fb7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de35b22c290ae0a547bb48f1188283c06bf609fe1ae5b1ce250b6f10516b223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb083f4de6cc8ea00b990d10d0ef88e4faa478bc34c5ca8ee73d16013aa3bad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-redaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8527a504e2f4326796f705ef62715bea134d342c6f04e28c0f6acf12c0e23f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-gaaigaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d96014c10c98a3dc319e6ecc2d5bd0e813991730f7902ecf0efe30dc148e41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diauauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90eae1dbff48f4e88c5eddee5b6f35922ca7e7925fccb17fe7a083e176b3913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiha-affyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e436e510a0eb8b16b4ca8ee61b85dbb6d28b1ebc245f8dc6302023ae9f98238b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-butmb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff9a9c2fd599b3ce60100290acabbb0b0c3c7ddabc42790453ee3cbb56a754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-pazuap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b65cd58c7e682d8119bfa7244065e17dc1e98e1bb411bd576d960cb77b7a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94c404d49d3568588aa0787dad19d8088312ba5eb3b001380db34d4b8fad55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...