MAL-2025-176003 Malicious code in miands-nurdt-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b8d23a7932e96c7dbe946270864101678820d7756e0418aeeb8a18ee3c298f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176754 Malicious code in nuilva-dadre-ahkanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09395dd10dcb04488064227b52dfc2425f4a6d9d07171697ae79665f500c01d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174155 Malicious code in godi-tua-inn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1190b4ae4d997e7e9d425ed07f8b2848be00c8f107da6c2fe4c2e1ae75782bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177250 Malicious code in poglymer-ogaih-gafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fb13575327516c54071e239c2202d7248ce313ef1486454464d32e17e57244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifafuatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f717c54d95d837cf02d769ccf2de3bd4e5384778994404e69516418c5ea878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumaivifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939299be01594dbdde4dc94c88578ac401fb19ba3f38575328e49af2f059b721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177992 Malicious code in polymer-gibogagia-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78980f3e90b6602aa19f7d2415ed4aff58703b64e8b7ab2114178c4c4297b04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174685 Malicious code in hitachi-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0020e4417dfad1edf552be665c0e7bf4757cbff467957f35fc5ac613427556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176963 Malicious code in nurr-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb73b61ce5154dc207a9d24d2f27c4e06fbe302af7567444aa1cccb829f234f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179143 Malicious code in thambi-yunik-ersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98e7075857a91955a171d1a3bbeedd244b7f97e6a1ad0a4e0cadd9330571759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175782 Malicious code in kupaio-ukutila-jokilouna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd66e4adee0d60f7b6b7161aa6576e7dada273cf831c7b8cf9eb233d258c299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177733 Malicious code in polymer-agdaigoag-agaghai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba160b1c1f12623e6b41009f51ffba55a254a67054260e17881114cf7736832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-fidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e29cc7d941074c4b0607873ca6abbed4f1e6c62396c6410608565e7207f243c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gafac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b401f744eefbc24a3dfbc99cbe537caf178b0dc6e70eab3c27c14b5843d3326a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc58b7269b26ad36c67fd95356ce4a1c97a8a0d99e0d4c7c8960b70d82bfa5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3fde3c7444cd4a12b1b6858fdaf54dc3b4b09d677455536e3c5bf8f0b0a5d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jiakalai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9d77f83b796a25934eab824cc564dbafc8df26856969149d5dcd2be7401473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-minfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17116201f4fc1ce2f12d20c6460e777067947fe54a7b51f55d75f942dfef0312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-tufja-inia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadd01ecd00863cc8f7aa251c85b050a8a046f994394cb411cf74cbf225702b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-abaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc765a9f46c60a5f3cec05c1bff511ba8b018c705b11a9906485c4bbb58ac53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...