MAL-2025-172942 Malicious code in anidata-haulid-mubda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f524bb839370e23a3f8b2e9117eb82d59923ecb6fab32890f4393c94b2506bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178070 Malicious code in polymer-ids-rgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da834e3b90985bb2f5625317a8b3ffc73eb030d0db219252be3913f35fa4beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174737 Malicious code in hitachi-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f634870d1a4cce67096ed92b52e12f109b82e4375d496b3a7fee058d86a8bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175139 Malicious code in kapvino-saufdaggafoi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3ea035a7fe69a9f54d4e5e21e383658676c9c241c4ec2afa8189dda0a4ffbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-iuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22562d153a87f2c380ff7fec544065162388e41373b465be54bc40a5e65dd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175020 Malicious code in irfan-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956c6b65155cfcfffdedfe88fabccacb058f95711e4e3a35aa760d4a3498de69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afiasahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df85738a25746e61d895edfb06dd564f5e3ae79e5312d375fe41c31bd5343bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudd-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51062813b0240b433da09c9b1bb61c1dffafb11e18e225aedef36b475c23d372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satiof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0e8086f59735b3ffb323f4228b6111b7185fe1f2eb4c8fce704681da3ad84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asafi-davatihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99495fcde25341899db35c61ae86ddefea7fe7b906537fdcc14f09ca73fffc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55981ceacbeaec2f05e0a5ed1e4ab28bec5629a5d9599f2332b4a80f717d379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267028f45697198f1ecd1a1b834d86968e4e543ded6229bb11a080b9864e4184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174840 Malicious code in hunimi-sathu-angiffafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6593b6f9322b76a6443e9634ccf92d2aa3314baf967ccdfd1b21ed92f85f578f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176644 Malicious code in nuilva-bava-madivnv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc2954d43700b6361cd2cd59b027b9a7fec4d2761e43eac4a96e5c0fda3a803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176558 Malicious code in nuilva-avaim-rusiavantia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58dfca170666f095d8f1cc8dc23f05732483032aa9f1c890e2702e3b1c097a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178618 Malicious code in sahunm-satudui-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa204528812a2d3ade9cb1a34a5ba621cc2eb66fbeee0501f14c16a81ce4df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175048 Malicious code in kaka-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba73bce38fe4639ef365740dac4edb3b6594c59b0ae09614368c64432051424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178640 Malicious code in saviotn-sadfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265812f2ef6a9608ad29c5742e43a03caeb357005e4a21d8ba9e07af065ae252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176569 Malicious code in nuilva-avim-rsva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b515b6f3ed82ca212984df48204484b93102742bca6085bd9bc0f7a70ee3b49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174420 Malicious code in goodafiun-tufja-inia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadd01ecd00863cc8f7aa251c85b050a8a046f994394cb411cf74cbf225702b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...