MAL-2025-173976 Malicious code in diva-tugafai-imagiuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2bf379c2571fa8a848ca94ccf5512522291bccbd783bb3bbf572e25e6b39db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173477 Malicious code in buta-fna-nafifagffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da2dd6c6cb78147341ec673f44ba1a717165addc42f09fcdaef038cbb166399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175731 Malicious code in kupaio-kulaa-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b151e3fc0dd80288b8de473e5a0599a030deaad63388a92b7ffb9895f07db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177761 Malicious code in polymer-agiha-afyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba74381d5b42eb10dfbfe8959a52003f5e30af789c4c6bae81ece041b13d905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176809 Malicious code in nuilva-darde-gidggaodafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16f11ca63f61f7e664dbcbab2db0a06aed9a175a653758274f8c7ecf8cefa12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175646 Malicious code in ksai-kilota-ailolioia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cbc304e981a59373691760ef6ce0177793c89475b5e47b8be86f183c4b9ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174717 Malicious code in hitachi-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9f29db439b11661b24134dd67c07e78374cf6e34bc780ca7c718602dfcc5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178065 Malicious code in polymer-ids-dorgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c3e96b0ef011c8b79011dcd591fd78a55c8397a52fcc2ac89b1076bd5c1a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175243 Malicious code in kapvino-socvni-fambavcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8168426b9769cdb2078df141ccb6feff4f7cc3cd8b92c066f65928eaebd3e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176298 Malicious code in nnur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b612054d3b8182776e466aee368e9ebd70944fa9aed858b4aa77a38fbcd2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178579 Malicious code in sahun-satud-fadoria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2f2ac83c9f4e2fea7c130370f21f0cd03e1cf6764a9d9289ed6df2650d830b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174343 Malicious code in goodafin-nui-nutygagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add597a8e5a99f2a36ac704e916290ef6880ff52bbefade61e408529205c53be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176845 Malicious code in nuilva-dare-ogoadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57deae5406e84cbe012103109d05b087c3dcd884518a3d67acd67809a17a6539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-fsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc033331c55d0a45d54da6b222406b004aaff9e6ff46135329165c898d76d24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172876 Malicious code in ananda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b439ec9e13dda10890f4cf1f15feb7a2c9c43abf87bd17127d7029c22d800e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177091 Malicious code in nuyar-adaraia-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b832535bc26eed0a500316c2c359011265232383b2a2bd14c2feb20878298631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178233 Malicious code in rindaman-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c111958a39f35330eaf3bdc87b60bee5f75e117f0691383af5cda0fb9296dedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b0d80fe37fb5caf4ad0d843bde023a31eebc5fada943f9b8e6632500941651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagh-amifagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b71bd7e36522ecc6896224eda96ee8f2f0228f1195c4ad82cf3c7c368ecd273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1938c51759e35f1d1affe6ce113326ec2c408b2b98cfcf05b95d7a09956033ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...