MAL-2025-175157 Malicious code in kapvino-soafadi-vanafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cff0429e0646bf9bb846467497b534e37751b3eb47d5687ccfdf9ec0c98fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178182 Malicious code in rindaman-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd79d57612ee6b358eecdb1bbd391dd9c40e42960af69caa078d892b50effbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178943 Malicious code in teagod-rich7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb30ff0bcd9bf2501ab1a57ca0b8c7431e735fee4581dbdde486a0beb56ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178003 Malicious code in polymer-gisgsgghab-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0815909fe53b8a5126ac6e628acbef878d33fd61268004c0f3018ed053f3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179343 Malicious code in unimna-satgob-naiubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6905e6ff62e9ab37afc39270f846a00bfc5d72fb01b9269bb83d5da547900f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176579 Malicious code in nuilva-avim-rv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13d9787aa98399c2490fd512a9807c74508a0518b906f25c2322a5372eb9432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174719 Malicious code in hitachi-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2bc5073dfbc665c2061d67be249eeea05b390ac62f266627afe22a24711689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177384 Malicious code in poglymer-ogmih-afafig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1d479d3bd9fcd32672f5d97915a438c9f65742e8e9c381c146263b527582e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173517 Malicious code in butah-asfui-dufaaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec1e7c72192daa4314dfdd788bfe7241f2b8243c934386aea5a9e2bd794533c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665e5cfc28add3f7bd4290a070828f7f68f4378230294199f37da64fe17c37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f164408161817b395960b0a3e3ace4e84cb7b1e59ef6e1be8107e00ef7c92741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-redsa-tredx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dffed6a979e86e2bc82ea9806af4706b13ee8ad719eeebe4c6bae1cba64554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071eaefff7b409ecc43f1b649c7829b02f49385b83dd8780cf6746582ea676fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaiin-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad726613c8c6aeebaf06879b0a795bcd495858b5a3f1dd41cedd2de065961a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liabokoamaam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee77371844020466aabb0c30097cc93b64fda9e0fae445cbe1294e70ba9300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhbo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00ca4fc664d3815e0395d1c8e96a808cc3839bcb3635ce36c7cb235d03d35b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adaraudi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e672a7d4e9a1f3b6242830c0825ef4a55542d3072aaf94e9335411daa103aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b411503a7c6035813563f39184685be698c3612f252fbf3c85e4aaff3429e188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-dsih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa72626c735f48b8904f49f9d9677aafc64c385e8be8039a2578f75197821cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butray-mutio-putyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e816c65a5dc28d8b78dcfa7d2a48c018178a4d56663bf6c981712177fcdf98d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...