MAL-2025-178628 Malicious code in savion-goodmin-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e268770a42de3f2b48547a0c7826ff75ed93603155b381d1f4c161e1151ab836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174471 Malicious code in goodain-nusiauta-nutuaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fe619406740611f7169b4334112a8bb8e9c7341231d48ace9a6c65354c291b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175374 Malicious code in kapvino-somagamoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2e4b8ae767cbb4c76b5825031455fa4c4bfb142e6ac154c8c00ea3d047ebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173018 Malicious code in anita-buyau-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615b511f2c68eebac6026fb2bec64dcab2fbbfa5e13e0f61aaf8edc08f8c08f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178220 Malicious code in rindaman-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b6ae34a19881ea192ae9b435a2485a4e29222a52e8e07658ef86d208e62de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173806 Malicious code in digo-kaim-liamkianr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00134f124d7aea49e45a80dab3179eca44fa2226769b2124dfa09e5c526db8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178424 Malicious code in sahu-satasamug-fagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f453ba32eedea235c4e94ce7728791508434340fa6ba3421251eb4127a7c01c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175819 Malicious code in kupaio-ulokia-jakaloakaanaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87980d855aeb11f720046e31820de86bbfdda4142b52be3ca485be5f9c5797d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175602 Malicious code in ksai-kaiso-olakiakoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9386e1279786078f0fb9a87368988caa824875b88220c4d7ab3b0c701138881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175522 Malicious code in kim-jiwon-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c7cdd6ded9086f94e7bf15a23146c63b851cca2a8b91826212ee985c741b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177468 Malicious code in poglymer-ognagah-aami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42b51ea35c16ec55fb1307474c91ed27fb1c66e9abc600ca66f2fccaac216a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177350 Malicious code in poglymer-ogihh-agiggsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dd46458c5522d8252650ff21010ee55acce88b174b8dec3ef654ac4dee5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae85d8eefd583532ed19a5d167b751d4f9e03cb2bbdda26bd6d06099b05f80eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sadmuda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f75e476e0f6828dc1308b8f2db13e6fed214e4e84871d6ca43886fa86900a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaapa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e08801a9eeea5f61a25a3c670b8466d1df95942eb49fd797d0b46ad02949935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusafasdagan-nut-afnaearaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25577f5e9b3c2540f9d62fd6637184a1dd416e728520a1643ceaab9d856c52fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649af86e80276ebd2d5ddadbc4f5eb352d1fe2a3aa0cc8f8bffec594e4a1fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-vfsdfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b4aa05d597bad155be7ae201aff078f7c25da91aa27aa075911c8b1469992a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-ratfdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed485e9c2c410258413bb5edc623ace3ce92ecd543a408c0e21178ef486ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gdif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a0a1941496aa5268f1494196ced02b010d4149538c9b3dea77241bcfb4ccdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...