MAL-2025-176470 Malicious code in nokire-nakaocil15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e359e4a021a17ccf9bbbd89f76bad026ff8b04a7c6d0661ffa8c4121c962259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177139 Malicious code in nuyar-da-rato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499586760e262e7b2451db09870632e4fa60826d5e99018e4d6c40347f5f4123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-acuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c35c7e19c73919126ead8a0d0721412d379da255512877b5e93a5a2d3e5cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178738 Malicious code in tanabufir-soafai-dubatgifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b37bfb09217ff407b841fb5d7adb5b21b8542e50a55c92b15e0cdcd7aab13c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stbu-gaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1008a077c819ad12067ec6c3c17dfb3e8a70895f0ff3fa59fcba1cd581dd7101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufamia-diud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad0a4723a4be890f23a98646ce834857e132b4e5cac7f81c8938d8e3469ca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4e2dc723998f885fc6b543752c982334b21bb05497addc952f3fae19e6e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174130 Malicious code in gas-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4282f66e3d7c86b429854fcee401c31f4351c074e524055c4de9593632995bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178051 Malicious code in polymer-idasifgfa-rataadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f054f3c904b70ee14ea26928f980a3ae88b753a89f2aaa1b2d16a786bf066b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177944 Malicious code in polymer-fdid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbcd40ffabc5edf72fed60845b63f7965dc54868803d8ff394e31eaef83aef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nafuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05d37e73c5a2a7863f6f9f091f7802dba78392704aa0fc0bd7e669a73d7214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175622 Malicious code in ksai-kil-kokaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f155e886e9ebee4ef7bb89e87f16af877871e78127317bea0f6d26cf8bff9039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c413f5f9782a182ef5e24ae2aaa14b483dd80e4900be2b844a84f6b048ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhghhsigsabo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fce00ac42ba8a3ae17c14f36f55a8884752f55406db76f670437b46f9fd6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172773 Malicious code in alvino-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5706e90317b82930734016969e099b6a9f008aea0ee927b6722120f1fef47df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9460bf4208206de2f4f8549985df9a9d88b02e56e45c8cf4b83acdb0f7bb00f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177504 Malicious code in poglymer-ognbamoah-afiavagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae60ea6f7ff73a6b0bc4857aa0073a192849fb1b1b4d60a323fb4a98afb66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-raf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3396705552e4b2c34631b1af009fbdb27099d1b594033f5ad1546bc4339248cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf67b3537ee84ea2c7c238644600688e255d1215709cfb06871e1ac1c41e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadg-vafgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9263b0d1afac10e6bc832d01e5647b6c324cd9113036497fb67edceb089f9e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...