MAL-2025-175427 Malicious code in kapvino-soovni-fafgsjkfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955ca19a290d57b8f777ccd8442c4a917ce9d62756e2bc8fe561cdaafc47d713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174614 Malicious code in hitachi-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1ccb5a2f7de888fa0866d2d809999850be440c7a1aa4f310e571b178231aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eba669c3666320bd66861be95b200ec2524fdba0fb0cf4e7842d6d3335901d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/rsea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b14f82ce3986cf17b6c8ba0654f90fdb145097d6410650cfa31a063de99e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-odgafdagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f15fd7608ceff622af3157760d1e0f758554fd640a37d847b2e6dd1d1d69aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fac519d0ebc6aee09e7b729e3e81fce998bea87ee00c8121d7f57afaafcc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safi-afcua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134ce33d15ce13dcf140b2cc6051afac93a4a0d4f2b7648600c586a96f83364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibogagia-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b300b642bb86f01915cf7975a7772f41c3f472814dfa4acc826200fe07c637a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiaiaf-cuaaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454cbb28cf217b11cdf7018b34680bd4277a7b65fc6a991258772fd7677301f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditi-tufam-itubat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db20979cea334ef607b61eb54294925bbf0ab50f2d5d4752bedc05b3a1cb648e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-mvmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122b889e943a038631c63a3e5a6ee5c9080732e3fe760f7667edf39c82d14199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178483 Malicious code in sahu-sautug-infarudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a8db00ca587774572e1315148eddcf806815a47fef6d84357ed2a78f0d2d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172849 Malicious code in anak-jalanan-mdn39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a949e936101973237e88fa075705c3421f852baff96b6c33e1823414404326c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175453 Malicious code in kapvino-sovni-gbfafgafaibssi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4fd51697a326c7158518a55257ad4721c6bcace088cd4cd0f19fbe0a4766ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafdi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddcc9fb833f9f6c661908a1abb2346b2d8729b75ba18a329b5e1747192d30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176443 Malicious code in nokire-nakao5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced417c9599d1ec7489df64f890c589397eca09b02f1d1a6ccc54b598a2d88fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177354 Malicious code in poglymer-ogihh-agsgfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d897932991f9adbd2b42844f4ed4f51b275a7faa0d4aea67f2f97f4715cb6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175215 Malicious code in kapvino-socovni-favnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6293705564f1d09db55057f8984feaa9c9d0ef5332cb5af488ad441fe5d1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173980 Malicious code in diva-tugafbai-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106bb5808ac47583f453bb85bd6e2964a44649d0656ab9b8e141375110d47cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176994 Malicious code in nutravaa-nutafrd-ndfuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5be9229d9bf66a7206a2204aae47a59ba7d3905cd4b4b535e72d1da465585b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...