MAL-2025-175109 Malicious code in kapo-samnu-maifamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb150148fde44ceace5b9e203ccf3b78dd7db58e189820fb6ecce3c7129b639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177079 Malicious code in nuyar-adar-bidufatd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd02738b4705992a4a30dc9e7224e786b92f871c39eec5ad23cdcb74a33172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174439 Malicious code in goodai-sunau-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244dae3c7e1297bda388f3d99c72c074eb178a207dca7f2900fb2575e737cb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179154 Malicious code in thudmbi-vsds-tyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6013982c84c6613342cc4a8d4043fe35b5edc8ec3a73610be0ef110e79eedb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177270 Malicious code in poglymer-oghh-fafilhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e063ba24a00cbbde368b1b556472b4195fee391637460df97356cf912f043173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84a0ba0c27eafb01c2f36d87ad5acf45ba90a531c199879dcb99afa01f22157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-busrt-tuyh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce74782cad040abe43850e4c088e1fb3983857c7a884e22e4520d3d79fb45dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8754a8cf18e9099363cee7dacf74bfc68befb4da3a19c6d14b949db4a95e9e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-dafa-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd311fddd8c08beeebfc4f234c1e7796ad90d751efeb2052d1338a78035244bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb5bbdc11d95ac3f897ad6cfb65e8f4646325444800eb973f09a0e0f74bf81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c834d750eeea1f11b4fcc67eff07053a212a1c3ed971d33aa8313b0fab63fe0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sugoodaini-ngasa-abainfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6686ba229268d648027289645cab4fe0869c2db574118a22ba545ad73ceb5b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec8e738fdcac38b353a08f163863665bfc0ffdc46267f5a2e60a86b7d4b294b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvviafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faffd9b5ea0e64e49675a2d932a0c15da81ca6daaffa75f90ed2c28b65c4ce71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-faba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255431fa5016370d3a420e9676eeb70d8e72c99a83a6d5c0e5063ef6b5713cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaur-mgfidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ed2f710a81e64b152ba52dd514116b0ec58ccfd0612e4217c038fc0d3992a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafamana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d58d3bda75e5d6622190551d64565f8fa9267473c1c95cfda5285e212072f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidafa-fariaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c5ad54aa67306b23a42357ed2e80a76fff78619e2043a8a81d09365e7646c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aia-afaffag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1256a123bb81b7c94b4ea85834082f382a8cbe42378a1da235dcf0e78252b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipofa-ihuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc02ff82bae8a3b7fa06cd4a19dab85478ed952ef0010c054122205453c7d173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...