MAL-2025-173671 Malicious code in butanaih-asfi-duiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b53e0c8101cfecbd2959f75b0ceb4b43763157dbb36de57dbd189867964585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174343 Malicious code in goodafin-nui-nutygagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add597a8e5a99f2a36ac704e916290ef6880ff52bbefade61e408529205c53be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172773 Malicious code in alvino-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5706e90317b82930734016969e099b6a9f008aea0ee927b6722120f1fef47df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172899 Malicious code in anidata-hadis-mamaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08ee131c6f1708789f54007f7d9b23a11d3ac4b05299fa42e5fdc4669de1bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174537 Malicious code in hakim-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdae6faa52cbf89a63bddfb615805fe1692cd00bdb57f4b0b7b25c1d7716c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174551 Malicious code in haritono-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ab3c01c478b22b563a0a0873996760e5815abf0924d2d70f2cdc54df2060d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176641 Malicious code in nuilva-bava-madivabunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4823bbf1773960950bfd97000466040770f3b5a15e7f89b00c6c042facebd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172651 Malicious code in aaaaawa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6ab45f229d17a972af19743749c54b1af9fc3b92f70b3607475422d9631cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173622 Malicious code in butanaih-asafi-davatihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99495fcde25341899db35c61ae86ddefea7fe7b906537fdcc14f09ca73fffc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174706 Malicious code in hitachi-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a5a634b93427670cdcefd9406f38e61e6e847cef3b1172e4721e48bfb3abb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-ggfoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45083b0675c4e60c52e20151f8a043e6700f259d6e9fe05b8d521a13d0b42e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agdaigoag-agagsihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ac0f7f33fc78db8f31c2298d5acab2aa7e0cc7ec1b4ce3fb87c97c368391df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mvvma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4802c4140b4039d2797145049a43df78b983bac55a0937152136a5162cb6826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfi-dsuausu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475198b092ff1857c04967bd7a98d52ea0d888a9f2e4b77f4c98922f0f1487ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-odgafadgagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c2815bd3f3776febd5522ac795f1fffbf81ad2e729f503c156141609c95444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satud-fara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c798a6bb28031a3214feaa1e2d5f41eef49413dba95e7fe3c90d3c050b67f412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-rffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047aaabec089080ae546af6108b4031f1d3e95d3a6a7259a871a474537d1cb66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisoim-olo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d735e5d22f9c03270a63e6b2200d84dd6c5f2620a73e466007bf761daff20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibao-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23f882ce7b2b39064dd8cd91b9725c4e3e24e92621b093cdcd239e21f67dc54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhaghhsigsabo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6aceb3218bb0eb135777938f23ded5d45718dba628d25dc75446f59862bda3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...