MAL-2025-175214 Malicious code in kapvino-socovni-fasfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b483ac6967b8d7ca0b079e2a8f8840199cc910a6a31ff582836a3c36b744d472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177371 Malicious code in poglymer-ogihh-gaghaoaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546ac762d2188661993bc29744d773cae46df3c58f73e83522afce3a46dcbf52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiautua-nutgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0440aee00853a9a493c7a14c5b5dbdbcd5d3041dc2b2dfb39c2563b5d18bd885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792f69e7e3c9224dce6c5ab3f9249a8d4111c73df1f251f50d44dfde649fc496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakalokakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f61f11a3ccc7194bf4380088bed633949fae86902fe334b0370a341f20864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-racing6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91da015b3f35ef03dd142cb4927f4c4c0628695397b278fa830fa9a38ba19adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3adee61278cc1830f507d613b3e16f5d097b2de6fbcdaf0899f2b532dc0e1f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83839eb03b1027d2475d13dcb178480b83f1d6e156ec626783871df6b982b85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gafaiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39f10808d97961206140fe45a6818ad3966a1f962d8a82aaba567f6c2d1882d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-dagufida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282141d4440b54ebf054e673f7abac6abcc9b70486b70b5432fd7eb116d31b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoadfifa-abodadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093779c67145eab9612df8b5ec0a8b8693f52b790ab4bbb2e6d94caf7d29149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-tusdy-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27619ef97e7faaf9cdf42fbcb2a8c94afcf6401349575d0cca373d609e690766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhbo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00ca4fc664d3815e0395d1c8e96a808cc3839bcb3635ce36c7cb235d03d35b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-ml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbe75d646faafc8b8e14faafa03301320e6f75233ceeab6b378c58926ced2cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca2ee2335f26294114a8a1378d6d8ea5cbe8d480273c9cd6f558d1ed200d7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dubuatgia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd07da888650c7831e4086a1de5ccdf1a3153a59b6ad2a855c1e3160b73a3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rusiavanti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6888f289e37742cb10a7917697e0dc797b106fc0b0cd809ad76bec4342a74457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satg-faniaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c88de7ed2c2e52fe239045419aaca4b8fcefb358b67eebffe5090c2edba499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-mubanaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389c11e6316e9d35c31165c781cadc65a1ce762bb53bd66c1ad164634d822211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-inanayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c53d18c260754fa8fea0c05154af91de8a0e509aaff9e9ff6de67201555dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...