MAL-2025-179734 Malicious code in kiudt-acog-efiuicav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146dc0b6826be6107606652f0319685c03644060f2d10ea8f944914b3af99f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179854 Malicious code in lookingan-jaja75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe151e61a346b0f5c11019092868592130d2f4e8e7e04e7a1aff8b382df2572d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ahiezo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e765f52640da8d10a64360ae50d5e29a81efad8879d93a07537995a2edca7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ifta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95d72a4290ded2f31ad9d6a3dc84ac5ec40b0798962ebc868bba6e8a20685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-gibuv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d930d7d23f424454e81619fb7886e072e800c81e7234396dfd12c8fe2a238051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favuraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c3123f840666e53da3ffcf034130bc1b52f94614fe4dbfe38f1bad18767315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibogag-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b2c3a08f359e958b66ac66d2d960a505fe86debce7fadda8e7ba531f22d518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipofa-iuahfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01020bae7607dafae7f7c2ec811b2880c712667f32144797cc65917edcdd1d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaabdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a5e733805bc24d9a21c4278251983e46a45ee444adeeede671dc444ab52d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-vfsfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3919c8e29ba9bf882553d2e0cb7269f827308da1ac250be1ace3123576a8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafiagfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc393b55007d5a5a95eeba455f3219c4a8758587fa30fc48d53beb36f8973e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-butrr-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263c31de90760af24c5795fc865c51de4e7e990784b7d9ea6739d24e594de204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imubauagr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850b25d951db9a1f96912bbfa99fae7e5d800f16071b6bc51b4e595d1aba99b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumavifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6145befd1f8e3146a0a7e757321e2b898b06cd29159122e0ce8e249228f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-in08dtfdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc89c75b23d5178a05d2a407a99b0b8eba42f0f9e8bb2a81c36ef59c5d7ba62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nsafidu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20e1f57d8c75a0f14eb0897a53a39414068d591c11c9d1871e7e7380dbf608f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiai-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa36c54509d4489f8df1d6f40740390a48c7d6f34ae59e3c654b18701cdfcd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd90a19f0f4bb6af23cdafc85234f71fc4661fbb91b7e994cf1340a48bc4a39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6467432729941e6eaca9157f04812bf3ae5f2501e370c27a52f1c942bc4953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-sadamu-mima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78e8fbb0449fd66c1616f5cb72b584592f6c70c2bfaf6abf35353f7c69634f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...