Malicious code in kapvino-somaggamoi-ugafaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ea67be42693d2bf3a8d5c663f9f879d4b1c3f20eb3dc6c2632dfdb2445d843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172640 Malicious code in @miptaa02/jis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885db6b63f293457d39568bc5e6991edf2cca85fe6a22c0e4288ea3f1d7bef7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174231 Malicious code in goditu-tufabamia-ditud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ab0ca47aa40aa6752a314d695e502876f0e29f0e776c35e9b6ba719e5845e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176131 Malicious code in miftah9-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c09041a2e7c54ff28a8bfcfb5adef7259065258fab54b9fc3ac8f05f724a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178064 Malicious code in polymer-ids-doreagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3897fee034dbf03e564dec87e8315ecd1e3f47b08e9413ff098cd297a7b837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b17ab48f57d0c1b8031d0cfd8524492cf2e06ae5d5a894904d764f5464dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke127 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9652548e75e9cc01688070539afa938706fa2bfc2b1be3b01c6ee13a883f49d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174334 Malicious code in goodafin-nui-gibafayfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1fe690259e363c19602c4735a54c7d9f2299fa9e872ad4e9bd8a2991901cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175549 Malicious code in koko-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dac5ae5af84f9f30e513fd3a75cb85153ddb7d91568c90a232b9516290c8202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172871 Malicious code in ananda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed858b064cecaba317074d11882b1b22a7a9612ac5f64b094056db593af10f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-dgaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6836b574c8603008c2f90e5d31265edf225061e7853a78af7200fdc7b85102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdssgggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605363d4634be7497bfc05b20c721e44b13653607e0f2585a5547fe663a3f126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socnvi-boasvobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0337761128db30040f1e04a7ca5ab5644d3f9471109f29620aced66aef0d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-pajifaasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0283335051f47c8dc32fdee54680e0d6d2b149992033811820c9c8f199329d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32a9c3c75a865cbea09a08abcdcb9b5b077b40916038daecbfc2664e92f19a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176dc0f64c376f2a0d7b8dbddf2abe95b58721a832e711f60df0ec8c9ec2f687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fambapvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3d08f1789aaa5d15188ac2e174eee1317f125e6b5117247a9d0b2e984b9813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fb13575327516c54071e239c2202d7248ce313ef1486454464d32e17e57244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhghssbo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0dc8333cfa6b1ab2586238a6322c1cef9fa9e0bc2b4d352e2197e9f47dfa2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fccba4b6adc0f8e211ea56128d253bae0630016ccecb3432a559974a2f0558dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...