MAL-2025-176837 Malicious code in nuilva-dare-adaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6379fbe336249b36c8d2e222f4bf2a20257239ff3e213ba5c55fdc536834e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175296 Malicious code in kapvino-sof-fidbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f4c92a0b00b967c112e258e592d1c1751e2be52c4cb67061f094a672f6629b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176463 Malicious code in nokire-nakaoci9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b507c44f761d8f4fc355f4c8a36d4dc473faa97f52abd946fdb419b5f1860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178658 Malicious code in sgoodain-sanu-nub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f47051c64bf0f27a7c05007f9d5ab235f5970223777ec8a9d8023436f97f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174949 Malicious code in ira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4fd4b9b1fb6eac49a4808c74ba9daece8be0478d080719370ad186c08e290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173610 Malicious code in butanaih-afusa-dafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6993a281d88522449487ad1b747cf0beceef2fb80b393b515e61e3a3569f5f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a259b7829c650494c5b28ecc3bd6c52deec65c844de7959695bfca0a234a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8836ff91b7a12090c7aff974df1a9e1781fd659930a1c1b2e602420607e9a5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banifbo-imigai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b9ee0fc9e8ef55bdbaab3c747481a5b97caf841869f89f79c176919078eda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546595a318228c8cdcd08a893f6ff0b827c710891520dfa99cdb1d0f0955f0ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53613763d1d4fcd557a5bdd69b2ee8d49e77748cc59e1bb36c9b9abf4c99aad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiyaa-sutiayanu-gandofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d7967de0e5d42dc44d53f42174283a413f20edc99b4be625fae38b3e1120bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cfbbed0d596eb7423edeed8830c288d06fb6240b2ee5ed79ec7fb7f14d7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboah-agavofagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4da536623a3c265d8b62cf8cbc89e15a70df8c53595fa45f34e0839061483fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaguh-hn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548f7af345b262833959343aa32e6a09140ee093e4e0da433f50efd1c9683b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-giftu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dae9cf934f1352257a06a752dbfb8a0e326b5eb2c45bdcdcab4f310e07012a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2140051e0f5074c3c46ae4cc2bdf7054401c3f86436df605331b8a66a3bf5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbo-imai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d7c690fd4dce5a571e1edb1a896f62a3167b827954f9bf8d5344fb18acd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gasunad-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c142b41eb9944b3d4ff9a42d12833f8024b4d9e3ded2a8f62b893b7ae1bb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596df8167e09a8fa7f6c81f63e65b4d1686b8d39479f4b6b638914347d63754f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...