MAL-2025-174653 Malicious code in hitachi-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98656dfe00bb39f770c0d0f3f88fa58e7d684964d79e26e90dd16fc62011f7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173673 Malicious code in butanaih-asfia-darfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d457d03867068ebb7a13a315c7ca92ee7c877c3d02eecb751f98f602fb699ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176118 Malicious code in miftah20-miftah2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48f5c6182d86281c6cf05457e9d9651a8b62d56cadb3c4f7e3e18e8920ff3580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174060 Malicious code in divata-tugab-ivacaafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f48ff472a2d7f2fa774a7643480eee0692ad217d02a132d3291297fc0138f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sodi-vanunds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1992cb9458502e52f97547b2ed715ae9b6b7074873c478533944fb5094f6990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174142 Malicious code in godi-tua-in08dtfdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc89c75b23d5178a05d2a407a99b0b8eba42f0f9e8bb2a81c36ef59c5d7ba62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176614 Malicious code in nuilva-avmiam-rvo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4f55282ac8c6728fd65312ac4db8b0543baa2aa07e73b9624c58224f1c950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177174 Malicious code in nuyar-ida-radatidd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8546986b07929634ebba78dcca018f2a4e35bf8d337091acd338f663bbbdd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176164 Malicious code in miusan-fad-aneraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36bd8d480e3e856841a116ffe7a35127c91905a08f334fb2bc207499f75b516a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178581 Malicious code in sahun-satudu-fadoribafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc0de63300e947ee2ff420429090fc99f38351a3b298c85d8cc6021060de023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fafea877bdcadce42704ee57f827a2a6ab9c958fa28db4113f0bada99b3ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-fagsihagga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfbb314657f118ad9f93818de5e15192493e386483631d90ad65332b941dc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf081dd41000368a4cdbe60ba06036137999dddd9760430386db313da49c4eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadf403b86c75bf95d582bc90755e68a7244d95aba618e9cd3523d1dc8ea5b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a352d44bc49b117a3a60168e4a4967109fa1205cc50b4ddb647a3d908baba682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6c6e0f47925ba9e7f34b02ebfff4b745285f36b3ef8afcefdc5f5c418efce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-daganyaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c760d19b5a3ef5aefd970904eb26be2071cf74a5acf8e5da75ddd1f60d25ca88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edb6db674569530b62edcee85827ab4141c5203ad89844f556e6574ab51b41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samunu-maiavcava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194e6f0ce6fb8b4c827204a3828481539c9ed853e90d8073ab09b5e0ee931ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-minas-minas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892862a7f860b8926ac40aed28bdab4ca6c1090bdc2fc6a3dd16a87eb834e458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...