MAL-2025-172787 Malicious code in alvino-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8509e8e7891f4ea1d9aa5c498dd0c9d44724707005628e64a383425d94a2c4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179409 Malicious code in zaskia-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51300758fd6b77ddbd511ecbefd0c856f28490ce98c1b2b1372a3cc1ccdcc4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177379 Malicious code in poglymer-ogmih-afafiaavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6490b458ee71e2e8d5f527dcd9ddcc6fd68244f5be18f45d72919bc20f3c070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176671 Malicious code in nuilva-bavaim-madianavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed75f51bee6f4ac0f855143823fbfd2c31c185aef7508c7f44af88496e5c5781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172641 Malicious code in @ryliefrey/rylie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c20d975441437de82ae333f6255fd3375f1a2a2f7734eb9f9ea08082ebd8267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173664 Malicious code in butanaih-asfi-davtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239efdb8f7224652e6e78db5b784eb11e8026f71b634c34d5698ec47ff292d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176100 Malicious code in miftah-mipta5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a4d54df8f30e83ea70ab1c102b5d9f01f4d6f84e47525866f5182aeeb9f80e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173638 Malicious code in butanaih-asfafi-dafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a053e4c2408d5158a51334417e8aeb41698e2ea5ee6e5bd1b2d730279dad16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176035 Malicious code in mibasah-nuya-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6a99c246e52276899daa108b84500f42293beff4f0010c90b56ffd2aaefb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175560 Malicious code in koko-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c894d36c394bdf584e2b9da47fee337b71183cdeda8c6173955a194a890ad8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175958 Malicious code in manadsi-sadamuda-mimanada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3951bdf1274886dbbc5ddb919df1ad71bd50a6e5e1d06930fa02ce30f084f24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179026 Malicious code in teriu-tui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a25f3088af4013c6cbeb7dfc7c529f81a639c7f02326b9558954b2d1be953f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175172 Malicious code in kapvino-soafsi-vaidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad90022b1be8f667556b1757abfe73ca0a3412dc2eb5f2e0207ab8637283c66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173212 Malicious code in buis-masi-madir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313e6f728546f9fc980c5b82a5e1fa89494edfd0b675e96d6182faf007641bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-gfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2824992638108724890aa595fa2eb8aaa0a650afb204bc1fb51ed26be4069903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-sathu-aniug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772d078835849788a0319ff49692f4272038d57939e104b69d72e9da7aba8590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sufggfoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e37dc103db039fee843ac8acd58d893f8509b4a41cfb2745ee41d7618f6946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabidan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af777be0cfb9694951110a242886614f947480349606728bda09169c7cc20e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-bytss-yudt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060ed6123b332e95e4cc68416aa8fe12e5258e6732ced26366488fbb94f38537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c9f3a45c3e9c1d94d6a489f9f8291d4759490766a68875271795c7806409d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...