MAL-2025-176860 Malicious code in nuilva-vmiam-bunma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab3725feb5e99abe1ad634a2b5635ab77fdd27b306425ae50c924ab8dec6eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179324 Malicious code in unimna-safiag-afucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3815ecba7337b59e0d2ef42db42a88531617a7e4406045ea984ef261cae05ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakasfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d9cd01dcc2c58c08058f9c87c20aa60512e346c42728227fe6d646e3cc5dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178042 Malicious code in polymer-idagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f55e5fea34829863338ddd769c8ed08307237054ec6478e0a37debfa8fe6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177662 Malicious code in polymer-afajif-roiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce6e6c800add7a8a86b4183a48902af3e6c6b02de21e21509a2ceecefec42f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175702 Malicious code in kupaio-kil-jakaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c2e6a680859a9a3e4d843a20a5b5ce115bb2f01356cd50aa7596e9cd08f693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3fd3deaa2d95ce6183d65ddb6f427aa8c984eb96b7c230b37e735a4c216ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e62f534a3e098eee2d42f84833cd941a4df4b143229d3a30d6b51d73392cef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173015 Malicious code in anita-buy-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b599342ad2a8e3c2e550e77f14685e0a1e5a9ee423f41378cae33c17dab394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fifoana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4af475ce325329523c28aa6e17a53f66127e2a2286fa0fa2526d360baf787f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in min-sohyun-srasasdsav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b7b06b985750722762e256ed7791eda57cd6f1428cd43a3f41a3c5dc449455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-manad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbd33499944ecdcd8b412e1d783ce4aeb0b163156fa9b62565ce6d7c79dcce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satuduui-fadabidantu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5e7f7bae609ef96a0919f58e4bb015d5c712da97e3332d26941027ea252e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanura-sui-dafuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf53cf6d4f9aeb63b3cc7271fe219b212aaa603bb38c8326cfa19bda900e12a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101fbb4dbad3752586e9adc754d5d872ff4f6f464e24383b001f622c36097e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasdah-manasisgd-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e3a90ff90d2dcfd402f27fd23dab7d1e1e79673fa3cbd363e7c6c40b1d422d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamkiaanor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d2b357a111e57c0bdd836828ee9755c6945729d9389fa831099a48a3aa0fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaggafoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1abaed1996ffbed75eeb2b51183b2471e2d67d0828b709041c92507d273582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461040528feb7929f516670438a4ec83959bced0e61fc285d9028a3189a43cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-mass-snuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60184f2277dddfd7c3559bddbee8c785a7590f818e6a8cd855ed3404f899a169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...