MAL-2025-174363 Malicious code in goodafin-nuig-giyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efed51db6f5cee5df4ecfc594f55584cf2d82f2f48f46054cead52edc1f1f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177388 Malicious code in poglymer-ogmih-afiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46ae354caab9ed916fb9c2837015b52ef3c49aa8971726beb25d29d10dc100e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177330 Malicious code in poglymer-ogih-gaggaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdaea12b2acbc75cf6ddf1a28dc43d53a0bb66ab8c07bacc4731efa31f7510c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173814 Malicious code in digo-kaimi-aiokoalamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f998b5fca7e60589a2deb8e395f0e34a0f768949734cfec00afa4692ace05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah5-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3224b2dd7f8ac7a1bf5c68b4a1bc3ab1e7e46d12b8fd39e5e14c58591a427be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiha-ayag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ceb42676865e5b4ff703d4351d93f36efa2ed2ee9c3247ee2ad4fcd0d464ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35c967ad901cc6975d654e86d0568fafda4920417f4c2a4e4f6b835ef04b6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13651cddb72d88d40d130ef673d4dfd17b3bdb6c26fdacaaec5f56b525b6ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-fidaobi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387be7dd9317b10c3aff2b7b9061ba36564408eb2af23f94d84cd6a59a9efb13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab83cd552222a7e4c74bf42fd86a0e1e85de583c5759eede8e57e0ec21d6bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-mmavmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fcad2e73812db881ad22b5894479c0faa7a3b895b0839d8102fd91860de37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olakiaoaalio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4220bfd50eddc95c59de94be77bae286dd73013eaf0b3abdb4bf4bdb9a3edc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akeee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758c8096f00ece8ab40f92bb0a0090d166b5840f66bd9b304cfaf2bc079180d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d6c80f81a4c93757d02c7e37a5b03586c0d52007d3bde07a7f11665e2581b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6fad7040c833a631c9fa273a5f0318a6d54d32f740e7dd89eed212a3e24f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304dcf5df510a4b333d8175c1d1ba3f219d3e35d8a1118599313f0f144a6285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaka-jokiohaasikimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23748aab3cce4b4af3e7d9a3a0cfaeddcd5eb4abe4b26b271153674c7c1748ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipoha-haufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346983a0d6a387a81fe0e2106c3943c7b2d9e649823ba7a799dfc39cb92909c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ed4f08c54df2e517adeb2e0afd7d84a96ea502fceb592c94b884c6b64657ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munufafai-sufanfufi-cagafifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb208b81f0d1776aa729cd517550d22f85e6444294050279e0eef0fcdac9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...