MAL-2025-172778 Malicious code in alvino-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c413f5f9782a182ef5e24ae2aaa14b483dd80e4900be2b844a84f6b048ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175773 Malicious code in kupaio-ukuola-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18796cf15f22d86c6029281cd64d0445b8eeb9e383945fe94998794126453a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175225 Malicious code in kapvino-socvni-bofafanif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121a2e89573e9fdd090ca1587482d088a0625c6725d2f95a4f8a4bde52531b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177457 Malicious code in poglymer-ogminmh-bafaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5ca82059b51c90baa2a72de67b2d408a5ec1fca9eba840eb5b186a3537b8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175522 Malicious code in kim-jiwon-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c7cdd6ded9086f94e7bf15a23146c63b851cca2a8b91826212ee985c741b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178011 Malicious code in polymer-ib-agaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65606088704655e643b8ac706cee3897e996eb3a2fa4f400388e1cf9545736bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imbbmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a133769398ed3dd6e10d7166e417deafed9302281d4a78927722ee22fba8168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-agavofgagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13775957f947c9823eda96fd223f664f182503484de26777bfa7bd31b9532411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-pajifasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10595eb04ca33228a4e29029c14f6ebb18e098608a8b91f749bbeac38ee515b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-na (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ea437ea6a1100ae8b6ce856228bf061adbb9cc546260836986e01035eda47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafamana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d58d3bda75e5d6622190551d64565f8fa9267473c1c95cfda5285e212072f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d10f6cc67ca2f7332020c3b0df7a3bdd45c62f6da98f47d173f9f50f4eafbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipopha-opaasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4f61b64c69393a18827fc5f6cf75fe0f36b155343c7c5e731f6fbb38db36b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0d078e9e833f805c894a4db1cd2373faf6c273fa9726921d51bd14e7284a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179360 Malicious code in unimna-satiof-naioagis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0e8086f59735b3ffb323f4228b6111b7185fe1f2eb4c8fce704681da3ad84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177120 Malicious code in nuyar-amar-afadafn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7a7044d2989e202a90606f051a203066819bf33ca4d2c2e2cc80456980d361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178343 Malicious code in rubiyem-buyt-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bbe7a491ca55d5a7a003b91905bd92e1bc4fa24f7dd1e8cf3210fc8803105d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178219 Malicious code in rindaman-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe7691a954a6558a962417b8a1af03a371b0ed459df096ae772d2e46af9b8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173143 Malicious code in budi-setya-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47464ea16576968568b1ea889845e571752b23bb8018bc20751dd6551f250c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176856 Malicious code in nuilva-vmiam-buna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59111b651a031e41e4b4f5cf496489e325dc754a8ce3c929901825cc80eb0d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...