MAL-2025-175134 Malicious code in kapvino-saufdaagfi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec2589d688b87037fbbeb4c3ebe4ffc2a37a67e6919324ba15c357a17f6a8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177544 Malicious code in poglymer-ognmh-afiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00056646eb491d40a9111c222ba824696906cb467ec5a57e8ea5b476fbfb0ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174229 Malicious code in goditu-tufabamia-diabatud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2219eb14c8ccb778c4f62944a6421697a773413060f5e7c7f10b73489149a9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177605 Malicious code in polymer-afaf-radodd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3269a03a64d897c2630f7cc1c79b8cf3684607026aa9f8e3f8b81eeb99e63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179080 Malicious code in thambi-ref-vrete (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2792ff640b6461a841f60a6f8f345d75c2c076486df73ef2bcb941f2234c7f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173715 Malicious code in butanaih-ffia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590440632645cb647dc463ed98b2187eb29a5c15a13d313a9057bea8ad0e625e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177603 Malicious code in polymer-afaf-radaodd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c24a6e88220bdd71b0f6825e9e1cfbc3cb66ef330214fc8112000cc77ba696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178384 Malicious code in sahnim-satagi-anjifanga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dbf3ec101c175adb1c3bd4a02780b5a83e42a8fb0e117bd1eac42cc6c6f974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173841 Malicious code in digo-kaisoim-olosdsika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45e114c99439df14599d172bb600924c654b5a20294bcc71f77a2b7600ac5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177380 Malicious code in poglymer-ogmih-afafiaavgg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ada34e0dd1a4de9b0c4e9436b07a1948c16d71880a7312b07579ab0e7f8312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175842 Malicious code in lia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f0e6e678964042cc884f1521cf8b8b34344173ca722835284684f3e334f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-vaids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993cd77bda3fed27d22b840d37fc7fe4d0a36a6dc8d99b3bee23673e850ae6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbda4b7cc759dc140abd5a2bf305812b96f82708d67d7e35928d65ad4980169c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23a684b387fd51194b6f3e2bacb32dd9d62ad086d64c15c57cec1d95cfe90fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngsafa-nidadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8d33cd7e6af62de6375a7fa28a66df084054430b1cf7ad62f97d574d721432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gbfafgafaibsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff260f50d9054ac85f64c2389a4ce9fdea882c72d707d8964fc750823c9f8dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nutayu-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20564bff3bce1aab4d4b3c72e7a7860221d435a56bf7e3ec7a11cb797c2a15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-gidodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cad03b01e3ee9b65479b3df034d048663769eb45cf7eae02f0e865fe44e0802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-namio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528f27238f2b0b89e48f683b8401ac29aa5d5a8ec7470dc6023d901fb67cdc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcf2084f75cba92468da79c4654a7c107d8ceff5ec5896e3dd51b00e74120f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...