MAL-2025-175868 Malicious code in lia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0d078e9e833f805c894a4db1cd2373faf6c273fa9726921d51bd14e7284a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174949 Malicious code in ira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4fd4b9b1fb6eac49a4808c74ba9daece8be0478d080719370ad186c08e290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175134 Malicious code in kapvino-saufdaagfi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec2589d688b87037fbbeb4c3ebe4ffc2a37a67e6919324ba15c357a17f6a8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177297 Malicious code in poglymer-ogi-ggfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda5b831d73dc200931c88c9ed1d2f2b49e153ccb989a2dfa8a5f318c65bb782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174937 Malicious code in inul-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4692523f30f6becc03f834f5fb93f73d76f7ad252b5063860266bfef54953540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175296 Malicious code in kapvino-sof-fidbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f4c92a0b00b967c112e258e592d1c1751e2be52c4cb67061f094a672f6629b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175890 Malicious code in mahiu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce30ec3702865dee8dc37e944a3569329be07a85195f799ce9cc6abb1955734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173921 Malicious code in diva-banibo-imifagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e080270429ed5a43fec30f66556966aa7d686b6ddad84b3460e8c7657792a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174521 Malicious code in hakim-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d7a3766f92b0221df74bd29da935ff7ab167490393d01357ced7199053aa2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174543 Malicious code in hakim-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e9010a82557beb6f7ed3ee3174fc9274018af61693deef2f4a9edfe038c4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177914 Malicious code in polymer-datdfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5138aa919349410594dec54bdf76d9b8d571dcfa917b899a2e18209c383d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178329 Malicious code in riya-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e38634a0440cd8b22dd392dc5e803503c3d8e9bed06285dc769b712fed124b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173536 Malicious code in butahu-asfui-dsupusufh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabc1fc09636d73c56f44d2981049a7c03eb7092041c93971de14d346d115f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175712 Malicious code in kupaio-kula-jalalokio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2568ce713e2d6e5a1967c74343fe7b652e71a762c9aa5a55e2aef9d4a3556f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-roiffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23478f24cf4c080c940c1266dd2274a274a923ee7511443f3f6e4abe8e1ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bef030ad27df3369de229a3d84232471cefcbda3d480f6ff9e99d41765f7de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596df8167e09a8fa7f6c81f63e65b4d1686b8d39479f4b6b638914347d63754f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a68326d0eec426a6b349962027895601267885384da04c538c3b37f214ae68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimon-ofoyafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6688092c74189631eb584e4d14b95c5bb8cd9c0c0e6b170f4ff927439ae7ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manuic-tauja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c9f6a0ada507080a65ee3d441449b1281a4035953e29d4f7de375d48ac54eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...