MAL-2025-179186 Malicious code in traay-patri-aert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9283489f753bdeccb05aa84e4def2330134859376c0f99984c261436e895267e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176377 Malicious code in nokire-kushina8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ec5e1e8602244eda28054deedc723a3fe2986e790ee99e4c466e61fbee8843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178742 Malicious code in tanabufir-softafai-duabuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205555c041479a7b422cfe5c6c102a5123dcc960df80f038e5bbc8cd1dafb02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177334 Malicious code in poglymer-ogih-gaghuagaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b3912ba0f3f0f03c2a758f9a65d111f99558a75cb7214ecdb66a1dc492be1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174230 Malicious code in goditu-tufabamia-dibtud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033b1d3e4d1c17b1db0a9e53d08c59b4c69b6a95e93da6b67f6f27be2fe1e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175794 Malicious code in kupaio-uloka-jakalai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2598539b5277bc916a826c0d17016a47f4a22b71f9fd4c2eb7805c6ada20692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177917 Malicious code in polymer-datdfadsid-raadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947b55e4b5cb71dc61d153dac0be67267117d244ae9a365c89af05ad068ff5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabiu-cufafanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc8acef83378cce599ef6b8a9a3cc21d059ea6952302164b5e465d4e5349f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samu-mima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b510023e839b6b8cc1ad3bef2fc79926b5723dbe7547da519c884ed93bc3077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-fajaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45920609aefd57adf7e8099405058d545d3fbbca29513947ce88230e1b38eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00321c0118ea1ecf3792920e7122a3350b710b593b319402f68d733f960b3f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-eraty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514755f1a377c67201ac46a43012edbfe7aeab7812a6828d562caa8dd83eae21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a856d3babdf7277ab8b7f6f801b578a96dc9a030bbba6bee1864f2ebbeec438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-nutayaar-kadasida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1505a43cd2619d662b9da4a55aa34cd8b47242aa7598456ab748914fbe4c4958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-ravu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c718a1175038520a4980081ded898e6083fb053a058c9f1f8d8c64eecc3573e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3126170a8aa9e880f92586f59e29a2273b1fbfe5806f597e0419e76e5f8313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-agami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3dc824c97cba51a6577d26475c1181d301514adf2103cd5a18faf9f64d38d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutabi-ivabagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52b38f56dc6b8ff0bc92ea727407a192889b9b197c1a0bcc29462c7c33bdf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ac29e63878431601e0035d4a770e104b172caf89e44b1c50d8bb4c27260c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravfonasiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccc7d763692868fb4c851c16f787500525ceeefa4fce8ee86b0f243d1a7e8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...