MAL-2025-173213 Malicious code in buis-masi-madira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab10f569c102a3aefa896a0ab21070cf452e029a8110f82f00cb3fbb0b7a2d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174035 Malicious code in divata-tua-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950e6568d5434e7dfb8e985ac9069677658f5fe612de3ad45305fcc402499c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172826 Malicious code in anak-jalanan-mdn16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23a684b387fd51194b6f3e2bacb32dd9d62ad086d64c15c57cec1d95cfe90fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173675 Malicious code in butanaih-asfia-darufuau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223dd3d1e7e708eee885629702375aa252664ca1fbc8e630ae1192bfcdd94ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174247 Malicious code in goditu-tuma-dibud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c148fb245fa346df567087c37b306088fa31bcc55b235a1fc9ea28401a543fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176373 Malicious code in nokire-kushina5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c3aad49df41435bc64aedd1f2644c15861f57ccc151c85eb668066b11d9251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176677 Malicious code in nuilva-bavaim-madivacvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c6c47c02a0a4212dac2fe83ed13dc831eb357554baea94640635cb50a87ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178919 Malicious code in teagod-nalika2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54e7de7b8befa798be715c481e97f504b35130774ff6bbdb5c328a59aec7adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806d8258b62deb7f521bb3fa431aa96512c1e32f4d75b1bc2b717b6e1000e2c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-reda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9bc5dd58058be1c7e33146fd65d4a2eea974cbb4b1366585f8c293840e1600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abbc62151bbb77a6a55a92993594e19d7944af9f5014608c43a3ebe73e18439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-roovsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35946e3412cbd5f8e9e9c2fe942da6e7209224efcb5c175bde5e71acfb126db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-angafagifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f78aad0adc2b583b9e2710f1f19675e4ff12304f3d05d7799ad6027098a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonadff-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93bf11b89357070037017dd8e27b6fe6cb2d82c1f9537464746d0c1f7354e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-fav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6128f4ef14c00e90c7ecb88b8436ad988190127dc93e6fae3c1f5b7356529b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-agcgfkaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64f9a139c2f1774c6a22890be9df95c8c610a0e55edf6d92201e684e619ffce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d9d27dd3b818e9bb1618cced34902a9ddd8c185521bc5272111ae84401c8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butray-mutio-acce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173dbf511c3f8e1a80a63ff2bfe3c84bc92c7aad5f17cf0c0184ebe6bd79dd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nerf-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe7c79f1fd9cfbab4425a6baaf2c24a8eb517a06716d8240128a0259af44fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvvihafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe208204e86049ac17a3aef6eee36d82ea131ef2064ef7c96740f2776a1a557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...