MAL-2025-176419 Malicious code in nokire-nakao28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646553b0dfa88b4a0781a8d75b2e613c78b9549e39eec6d05bf4084efb39e10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179327 Malicious code in unimna-safig-afucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020821432a344e4d909259d3daf5c1d5fe82c4b7098b9e53ff24f63a2d118cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176429 Malicious code in nokire-nakao37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d72970096663db00315b727e21189dc18ff669c794b93d1b1affa5cfa4bfa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174003 Malicious code in diva-tugfai-imagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610e2e46c62b65c0822b9456cbc14017dd503f4ae6de4fbbf0cbfc95ec0029b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176943 Malicious code in nuramagi-sutafi-dagua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee82bb16bd1f2ca6b41b703ef45ab9915891bec6d39f181dd5313f976797b99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470dca2cc7bc4be8bc7566325d1b87239b9f538360edcaf28bb4d584cd7e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174678 Malicious code in hitachi-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3485fe21e42d845bfee181f788ab26a2e5b369c4eef0b03a3fa3ccf92a9b5cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174934 Malicious code in inul-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6ef664e9fab0cd1493feaa008afa810093d206e9e38ff4cd929806f28442bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177430 Malicious code in poglymer-ogminamh-famaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e9eda6b5410d677b997cf7ddacba4152556329e848059e6a1ed8d02bb4d6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173144 Malicious code in budi-st-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d840e501061fa51884f7540468d7101c2d2d6d60f27b8f8be45251b0d4b262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179215 Malicious code in tray-iutuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384abbfce40751267521cd49fef0093c166bafd44ff8e231a152984cad0ea7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179393 Malicious code in zaskia-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e60805a0c68674324abbb0da039994c1cec48cec1b631780261d7defcd25b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-madiuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e206f07e4745df3bab7291f748bf11b12b34b89904c4fa05550ef0e1667343b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8b3ca1879c379d993458af9fef2bcbfe6968faf7fec8fcd67de7dd534fc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favavri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db44ee698778602551881e4f3c4b26d6bef6082dcf779f2f8af6b14e782b3484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurdat-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73a27a3addb135d3eed59f81482e5083b3c2e3fb4bf73dd1a32ea80e5f282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9257b10467ceb4db0311d8a2a0b921fd2214298af29c63dca9d610e7c39879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-iaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9214268a4166248256a1e8935bd10a175fd84b7ec4cdaf49fa8dca7887ed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cfc5721ebbe173949fb74e161d42d7b2383b99a3fb6b1b0844650c828bff80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-kasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e0f296d45a317d6313156e6ea922dcf625e7953bd68f2dbb44ed9331fcd253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...