MAL-2025-161385 Malicious code in nabuf-otgaf-dajafifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6377a0e95161d45cba7f6eaf100e615b832d9dca96ae5bd95e1bffebb595fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153801 Malicious code in bitha-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3948d8f23d42b052821fd980b46cf0e5c6c69fd4667f8e2d5a1b5ffc3afcb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151602 Malicious code in abuibanua-mobiman-arayta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e7afe2d1e8e95f8c3bad40987f32f7299f6abaa37bede9656b98d7b21af5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnimas-offag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2b6e5b6e91fb6ddd27e3aa9abba07fccac6fa33fe7d9a7f10d7d8be28b1095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasik-nuts-bu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f4296e9616498b455cb66aea45e5d52328fd007d79a50acca77d9bde1f8916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-dafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7c930825f70f971899cba0c74157f3fb0c58d6ea94f7d2146d7b02b0cdbea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af0b495eb8e5da519a1d76e2e6109a09db2b702eefbff041a6adfe0bfaf23bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d9c8371dfb702917a14c27d72c42879c02a0e5de376a8dcf2439ca7073aadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf1404abdcc3f395e0423832d196b3f812374d5b54ac3ea2921e145ca619d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91105a18a52db609d99aa8b6297ae4eedeb2e65a97818f83fa0d467a7c7aafbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a5bab21a8e602f5f94ad882ec4d4259bb66ff55324d32e09d0618eefb4b24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d729bc9dbaa0c913fd247d775686fd686f8a23327abba1540dfce6b170f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-murasaf-mantan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcb57163f49eeb6c09164025158db0246f1dcc285e94d4183baac1913851c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumaf-nagafuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbb96d5b6cb844d754c072182849d400a77fdd266b456078356bebfb39c8bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudia-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08770485893317cb4411d4dcc84b196807b6ed75d241e44aa4d32c3b16c8e898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19d0e342ecb592b36912a009e9f3d90ccd3fc0a1076716cac9b08d0e194bf37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisfyau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b478e03660af6be2e983a9eb8e54d374f1859429bb4e63b6be94e56816a8962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520e2561fe517184a8867a6f8b20132e0af761d1ffa09748f63401fc064c0ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7879f247630cd4bc0549103b346a90471004b8cf82335629f6e9bfe6f5cf4b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da86b904cb74ccd9a69bb6d59a9256884424a6c8eafb669d38e73d9c6066e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...