MAL-2025-172768 Malicious code in alvino-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac240abffed35713dd4670b4a549fcfb1c6eecf4ddca33b835f3f39d0343c7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176985 Malicious code in nutraa-nutr-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae23211f8bee219f6193015edb59a59970334b01d55b5b5b5ddffb6d8ff4063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175532 Malicious code in kim-sohyu-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c7cea174e3e035a5619e43488583ff02bf9c17de1a675c22a1ca98c20bad92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176254 Malicious code in namacida-minuday-kasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e4d27b13cc4b90d75a3d1470cac12006f5d1545c811eaa401e22c243ff89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178883 Malicious code in teadod-mipta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806d8258b62deb7f521bb3fa431aa96512c1e32f4d75b1bc2b717b6e1000e2c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174308 Malicious code in goodaan-ngusafa-ngia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61d01163005877843c5e736eedba9a69e260e6bbdb03c1d68387dc766480f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178607 Malicious code in sahunim-satudfui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bb06e2b2adb6076fed137e4ae78fc0f65a0570cecfba9a0be7e8ee2a6bdd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176308 Malicious code in nokire-kaguya18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2bf5566bc0ff849b76074e065470bec8902517f7c8990b617efc42a70d20ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173506 Malicious code in butaaih-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e362f224eee4c91f0bceb7759feff13a495e5d488059c977d2d2ed98db89dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179293 Malicious code in unimana-satgub-naboaib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235bba5954ff3346b0bd70ceb172abc47bd3ab4eb50d02ce6815cf45c34cbb27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178238 Malicious code in rindaman-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd48308141a59705c0383b7ac1fdcc6cc63e335fa13407d570d5b0a85b27924c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173653 Malicious code in butanaih-asfi-daufufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aee716e07487ae749c775a3efd0743d2ce594f8f2f7b58e7e6a44b1e53d74d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177371 Malicious code in poglymer-ogihh-gaghaoaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546ac762d2188661993bc29744d773cae46df3c58f73e83522afce3a46dcbf52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178653 Malicious code in sayyyyyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e13e1b108ea78c267e064c6752c7d06e453e7c8088ebd7e0e058ffc434a5f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178260 Malicious code in rintono-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0afcc4b3ff5c57b333026ec2c86f44825bc04199a8cc62f91e3813d7dd07f9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177934 Malicious code in polymer-dsa-late (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa228a18b74b33a3e9d79d06aa2f3aa6754f85a045bc64537f067d2ba0724255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178878 Malicious code in teadod-mipta29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e071f839e3d8a75b7dd9eefb53d040632d3bce722352cee8214d2b099df293b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173436 Malicious code in buta-fipoa-ihdsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f11f21934ad74510e32bfed572f32a67715f58f5b7fed8fb9a880205c5c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc018302a1fbc22933a3c76a97a7f8248b8326701c30d629fdd213059cf2630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36065b481e6a544d64cdef291a15ffcf9182f460687dd421cc83832cf5ad03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...