MAL-2025-174249 Malicious code in goditu-tumva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38625bc5e649fd1f3b292f62933d5e7c7df282d6f069f60609fc6f64682961fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173591 Malicious code in butanah-fipopha-hafufuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295a91161cb8a11c7452c3649a3c576a28043166056086bf68486aa037aaf302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179225 Malicious code in tray-iuzp-pert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88117e5bf4a2e675779ded5877783abcd3eda364b0f468796307d8868c75160a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176167 Malicious code in miusan-naba-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d79dd8b02f19c034c6b39bb40049031245ee4912e3375fc245321a5f628afb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbda4b7cc759dc140abd5a2bf305812b96f82708d67d7e35928d65ad4980169c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5d28bb6420f9f0e144ac494a7fb8e06e93be70fb965a329d89eca086b24782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177556 Malicious code in polymer-aajif-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fcfe396af04e2bd235a6d3ae7e1e00716753ce77272fd490ef5f20bf488851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173400 Malicious code in buta-fbobna-gadodaafaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea19aae8e27a09dd47e6dfa087f23bae3b16951046d23fd35c8538c338f65b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178688 Malicious code in sgoodaini-sanuga-ut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf8f7aa47595a442faf35ce15d6ba0ebe29e7897619f3b4f034c331dcd3d2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177318 Malicious code in poglymer-ogih-gaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1e68133d84295b6d504743f80a0e5e39163ba9ada059e6f987644978fb8b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipaanoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79490f0134b7f946e2aa733eba3c3c9628ce8ab5e929ab52875948b8b4643279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177690 Malicious code in polymer-afavof-rzfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d29456894dee9f9fac7900e89f4c637d57e22984d8240598c79dc2ec7f32853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favurafant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96e62dad0d88c2afe1cf661b2f2730cb46f15c8e9ec4569158fac32f2430018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tma-dibud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8afc065d745c2be45ad5c924e8e9534f6eceb38be29bb1a32b3d988be430cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-iggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c453aa0ee40c37e302f53fe89f301c5df6611c685efc07aa282d74d8b20f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-faa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bf3ab62ef408aad58a2ba9277906f55b37f3289df8afcb3bbbac8bc8439d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurt-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914b1340cf07532a55667232a448fe6ce0bc3439b1963c4a155c6d7a9fc0e8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugfai-imaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccccd5885d42c1620467e7b9eca1514ecc501023442a94a25d337d54207920d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172795 Malicious code in alvino-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7610851aec4140792182b0a3254cd2a8b4da66b2c479072a5b919b0b4d73c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173685 Malicious code in butanaih-fafisa- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20301b227d46f760b974289381ab05e8066e9ed929ed7255699d394ecc821aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...