MAL-2025-178522 Malicious code in sahufar-satiaf-fav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6128f4ef14c00e90c7ecb88b8436ad988190127dc93e6fae3c1f5b7356529b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178546 Malicious code in sahufarf-satidaf-fabasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe62d482800cd1631c6bb118ae5d2e49fe73450bf8fbb9b297c70672742a12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd88c25038aa70cfcb721d1d02d85fa57ad84c6091d441981a518ea14bcb025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-sathu-angiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bb20c1b94eeb8c58793ef8897c59877d4ef73a5a5e4e4aa3ad043fbe8fb337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cbc14f8682ed0d4e82058cefd22a40af997dab91fe6fa05dff16661b9811129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-naf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efc7ed2281119963bcc90c4e6ed0993917f55f8aaefdfedf2bfcebd52add2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afiasahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df85738a25746e61d895edfb06dd564f5e3ae79e5312d375fe41c31bd5343bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugaui-iumifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99ac5b19294e19cb20602a44d79425329b218dc128b85b1d51bcc99c0fb62a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8a7cb512d051437e709be1c61db1ef431adc76d6c619ae01f229a914eae0ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imanumabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668e6cc1443901facbd425e92f42acb100785af113222373f5b53e9567971ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunau-nug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244dae3c7e1297bda388f3d99c72c074eb178a207dca7f2900fb2575e737cb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anna-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a99818fee7cd0f2f61496468aa6b190495c8fa49efa03cf5c001016686997ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bd7785c84fbe79147be2f606bab5a1dfd83189af19dcbbbcc5a52fcc6283fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-ta-gif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be353c3808f2fbb2f415b8dcf09ad22cd83bcdfca1a7b52bbc63f95ce6220e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e963143bc2fadd80c98a33a3be3782c7b03a216318c5c0a04d64d053178193f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopnud-mavida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5a9a6bb57295a55ec0cc7414099791dbaa9c6a4bfd3474ec34aedf9e9c325c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf682e24dbb291e490c679412f0045133c0983bb480f2a33526249836504943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gadoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beeea64ef4f7119300cfe8699c96cc97d38833158595551da1f94b096263c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdf8e3cdfb1e84cc4d45496defdb0ec75eca6c5298ff74521fa8cbef3aefb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2140051e0f5074c3c46ae4cc2bdf7054401c3f86436df605331b8a66a3bf5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...