MAL-2025-175149 Malicious code in kapvino-soadffi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb2f17b38d69b92f902e7e738f4dc2183646f5f50e90260369b53ebc0b7ff4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178898 Malicious code in teagod-naiman15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad158cabf8ffc36d579dc76eddbd6544bfac68718867ee2e5d60eed59a5d54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173978 Malicious code in diva-tugafai-imagivaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57f16598f2ea83db7e34ad5d69aaa5e9850f829a058c4b5b6dbf9ff767deee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172770 Malicious code in alvino-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1a35405ae7f4dbe2451e8bd88a0f05a9ef2fe69d02a7b60d750e3de136d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-taqbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1b3502efcb3e53cca0008dd5ff72b8d67daa9a23d41d417301b4bb20b51e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db2c185dd7a560eaeae9388d02371beb3917e0c9d1bb0bd7d28af26a130eafd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178870 Malicious code in teadod-mipta21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37985fef494aa7d7d73ede3536ee7720e23777c650fea47e93c4dc8e923fb907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rusivinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4b310db8fd1c05f43d2e19c6a79a914f67eba48f40b91b713dbba0b691ccd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64c36767a63819a3e942943fbd25a96c69d2adc2e1ed808a8f1e3efadf46f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175042 Malicious code in kaka-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d197d46f12af0ef7ea500418b958da3021e4ebb13e7ba48a7806e463457e44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177950 Malicious code in polymer-gafhgasgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d724ab98ea57b6bcf92297c4293bf72c51509ecc389bc7e7f4aff0c1be47761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-gagofgfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f44bdaf19310877a3eb01f1038e0729f2ed25cd4cb1617b9da2679c3f5a1ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-utudru-uyia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd8fde52ab078ddc24d2fe29f581f018bb720e966157b6fdf8ddf1878469062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-ahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd96b39fc6ffbf803a105f58fc4e2816b5ea97b3e39ae5e3ef956a9887f19de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176167 Malicious code in miusan-naba-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d79dd8b02f19c034c6b39bb40049031245ee4912e3375fc245321a5f628afb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172796 Malicious code in alvino-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6935b7b43a0ac0918b83c2a0fd29c8650bfcfdffb9f87300d4b767fc5e4bb4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-cuaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797d03332f40088cd4e19f432d6e3a4c9cd0db453e1c29283dba1f9e96ee99b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabi-ivc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75328a43ecdbfeb7585f3dfa5b6a5a2b92fce8b36ee575a9a5371662bffcfd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapagfafiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed2a431def01ae00cffce6a60189a806b46090d588b860fff110abf34dd0748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-erue-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706346c32d65707d39ea2410c3276da8c48a517034a2286f4eae8193faa079d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...