MAL-2025-176341 Malicious code in nokire-kushina20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c5b751925aadd67ac64b31d63ad1be49f2bb33dfcf0f49ac514df151d9b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174621 Malicious code in hitachi-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b385612a66ce55d5769f6f4643f9f36f0159b383dbdcf8e34e30e636dc6ee68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174308 Malicious code in goodaan-ngusafa-ngia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61d01163005877843c5e736eedba9a69e260e6bbdb03c1d68387dc766480f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176237 Malicious code in munufafai-sui-cagaffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab8f74e1d9d7f886e5d5141f6b32b3767823dc19839e887a47cefb107fe9a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173365 Malicious code in buta-fana-safa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b6cbcabc2897a936d63247db5af0d8051d0def9d1cbdc45659f97dd468727d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173515 Malicious code in butah-asfui-duf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb62cccc16d7ef52664f8998caf4b079c72754e5870b15c0fe5a41d6f8ba930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177310 Malicious code in poglymer-ogih-afmaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712fd1241064f45109470438f880867e9197d1a26465e9d6c96e2a741b528ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177505 Malicious code in poglymer-ognbamoah-afivagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe2802a97e8d051168766f76f62476767007ed04ad8e48f8ce71b84e5214d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175971 Malicious code in manusidda-nusadsta-baddanto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d040475d984535fb373957156c5b43cf708dcb8f6433e598e76eade52b23345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidafa-fariaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c5ad54aa67306b23a42357ed2e80a76fff78619e2043a8a81d09365e7646c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fabafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647948615cafcb85f325b7689689eccbe151c9a3ac728dfafb0d1e466a5cf334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c0bbb2a4731602c63c1e0fb3da63ece7c438a18c1d0e405d595b6e04757873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibfaa-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40916d7578cc584460566433108018b41d3eed5abd835aeffef8a976170e959e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gafhgasgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d724ab98ea57b6bcf92297c4293bf72c51509ecc389bc7e7f4aff0c1be47761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushina48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf87147f90365c63254a84b887d857cf1f9079a6716c1c2a9a7a7e248b1e39cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf177c882841f4892fcd87fce7b1a0c5d4771a6a27319d0d356c8a45d9240df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vmva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba19367cc433f9ce84094e7a3dae024498dc5ec2784e35bc2e54c06259aba6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaigna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c8730c458c4758493cca40185f4fc5dd25d3325c752a2cbfc4a8e3562dddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf15627cc4e0104cfaba6d230b459964338552ee37d56283194904ad3cbfd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb218e8431edf270a16ec3db82db531fa594659a5daadf677e8643e795577932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...