MAL-2025-175413 Malicious code in kapvino-soni-favri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7d083549be6eb45b4c45e510ab1af4dad1a61a587e762dcad23d9b01f58347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173694 Malicious code in butanaih-fafisa-dari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d14c6eda6082d841d7166fad3485ffccd0624f31426601d5842888003e529e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afoffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c84c17d59f09d3cce7caaa6323efeb5d117cd96a76cc268cac0091315d1117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favurafant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96e62dad0d88c2afe1cf661b2f2730cb46f15c8e9ec4569158fac32f2430018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugfai-imaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccccd5885d42c1620467e7b9eca1514ecc501023442a94a25d337d54207920d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gafhgsgai-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0df8182f354a78d72042c38f66e5a71e6a89d1b9831bb44a457b9304078b04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178273 Malicious code in rintono-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160f111b52000f951becc8ce6146731dfaa3a69a538928eedbc0de79774df410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177088 Malicious code in nuyar-adarafudi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f822eada82571b13d5c0efe93382fbc35eaa77e25cec3628dc17d26fb8151b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177076 Malicious code in nuyar-adar-bidu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec48b299fc78fe965ed14b71095fa3a992fa36e671a954e4594f39876a06e34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174466 Malicious code in goodain-nusia-nui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed83ca7c5959d78adef52f88c41c4b43dd9623214640b9182b9441e11d2ea51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177418 Malicious code in poglymer-ogmimh-vgag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101fbb4dbad3752586e9adc754d5d872ff4f6f464e24383b001f622c36097e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179225 Malicious code in tray-iuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88117e5bf4a2e675779ded5877783abcd3eda364b0f468796307d8868c75160a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176481 Malicious code in nokire-nakaocil25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecfad4127643f40b75dc888e84d0335a904dfa5c6024133633687915e6a905b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177220 Malicious code in poglymer-ogahih-faigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da51fa21790b16378a65cc3be4f7b1fb1c986bad2104c3ce390b0188c69adf94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174161 Malicious code in godi-tuam-inapyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16929336f49a9dc9aef82c748455faa22ba1c46b49039834c0840dff1c1bb173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177703 Malicious code in polymer-afia-gobafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 472c175e3d7e79e4b7f00d06f91ba3b464a24db74676381198b7334fabd2acfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175293 Malicious code in kapvino-sof-fidaabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642d1cd66002ad67c50bdc75a06e70cd2e163e4add1d4dd1f5b32fc84467be59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178750 Malicious code in tanabufir-softafai-dubut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795237d56472bc0a8c8f21f8a8a98126097cb3ad2304f5db6865ac5ed58f757d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174249 Malicious code in goditu-tumva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38625bc5e649fd1f3b292f62933d5e7c7df282d6f069f60609fc6f64682961fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179250 Malicious code in tray-upozp-namaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef19986e962687174a52b80663cd1460794afcb70235a9f3e6c9b71d39b5465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...