MAL-2025-175077 Malicious code in kapino-samunvu-mucdvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe7812f9e8756bb6d17e0e30df0644b22f41a12d62f89936b34358023c590ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64c00ff17531f341b0b3d7ad1d6def194155416e30d93ee6ecf3bbd4fa7bc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimia-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf8e4d823dbe99986aaa6f44360f081017829e38aeeb4c38a7366a270004012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd30fd5d69c06d64e3e9beb33602bbac863040305cc8a824540d3596cb67b6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugfai-imag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6abd3914c3459f44b2f1925a2a73fdfb9239905e24d6fb187b1a084f64b4e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-kangtasa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b5328272478ff28ad5d00b08a6f29385717f7daaf6317fb2f7f15696b73f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c7cdd6ded9086f94e7bf15a23146c63b851cca2a8b91826212ee985c741b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175061 Malicious code in kapino-samnvu-ubadibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80732ce34848ed88f09ea1d34aa11cf778f3d82b6e2973a895d8bd7542b57fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177979 Malicious code in polymer-gibg-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e36df48ea6c3be6eb7477009d9ad65058a8cd71d19359fa0d32369fcfd7b2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipofa-ihauah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ecc27de9700059fe6ef87bf6416f8507f56a2c5c46cb4d54bd09f9abaf4ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173885 Malicious code in diva-banbo-imunsgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb41f66e0c0c1a0fe722ae4ce7324b9d57be1ec79d9d88b8b05f0ce2e84d0791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174114 Malicious code in divata-tutabi-ivnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ede57668845d5baf01fc9c5b19c2843d4dbbd06a6d70002f387d1b00dda58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178973 Malicious code in tearich-good2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9985e099c694c26950e215662b746895a751955bd13afe4457ae0d25c1339b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179295 Malicious code in unimana-satgub-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41bdb1b2ce886163e1ff76e4be47176280f3b8b5f4ec61e4d13eebc7d879634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179208 Malicious code in tray-iutup-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951e22bb423fec98be2560c57e2d0e969db550395c76df4a961e8babcbf54538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ugaffaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ee9613fd05f60040a352769e9567dbefa2486100fc0c2e635bd82137acb1d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c865f38ec9448e666f435a9fa76ce9e000494bbc542a266cb83eaa439d8c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ter-sohyun-est (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3140f9d6b34ec291542ddf7d4d3f4abc6cf25b4e6cdd3e404749a3c4e32f32d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-budehi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c8ac4b09a83df2a049df1851308c3a6fc860b61b0772e776d166df5ead3056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbobna-gaddafaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede2734b0b1b09b504f9729f517fd3df3fb919c948a8a90b2d17bedafe0265b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...