MAL-2025-175315 Malicious code in kapvino-sofgdani-gagofaffua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c227c545d62be0a5874ac52a4bc44c4d53d65317b25c80e666ebb6a2e5836d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afiafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfdf62bd2d08c6a6d58b61bb2b24f0e9a360c2562b1d9aa1d5e8e4f13338df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rsva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b515b6f3ed82ca212984df48204484b93102742bca6085bd9bc0f7a70ee3b49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3701e5021809c7d06de3073c77a81b5dfa51b1b6d8b17814c69a0de1fbd527f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godivab-tumavai-dnainu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc29718176ba5ce3006846c30af2b38035d0e09d516a8412c068212d44e1f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9826d732d789c1afc31f25b6ecea91b05b4efa71f0d1ac0843b46686ed19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c17e9f2440627eee20a453de577e44ec657d413bcaee0e9748e12d96f5a7f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madmovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756f2c81930871805c13b4447801b58d045949dad5ed3489ec88ffad2bc709a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-aggsifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94dea6e8d7dd436388ecabbb6d1bc225e5dea8d6ed775bac1074b33e7cf90c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2aeeb8f554cc5f557e57e3ec1f98b0c2591bb3ba8b7b7924d4803feb032bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b50bb7d8340b9455f9d8266c603c40065507afd1fba5a1a0d77e4d3fe3c106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-fgsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da358763b63d9a394bb8449da29356aaae08805777e41cfa2a375fee8b7a65b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c0bbb2a4731602c63c1e0fb3da63ece7c438a18c1d0e405d595b6e04757873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rich6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91238394e70aed16d19ed6e802e2423af895d5d182c41827768e800ff40f8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035fd0b6d5cbd6dca25d4c05616795f113b2b74810855969b0e7fa497d8be3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogodaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d814e6ecaff4819d17c0596b38c1f3db2dcc4875b61af1de112bea60d5c74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e4a2f8be29745224081cfa59d5e7e2cf2100d53b5777c2e1aa55608090394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13195e9f3f98fa150b5cae5dd894dc7f6299f3f0b56331652b38f109475c2ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce051774213a763606f7c315cc465e722516179cec69806edee7d7027659575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee680dac6a46ff0108f0e80a2ffa7fab8bea54d16be13919b95973e9e5e145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...