MAL-2025-174355 Malicious code in goodafin-nuig-gibafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f164408161817b395960b0a3e3ace4e84cb7b1e59ef6e1be8107e00ef7c92741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176866 Malicious code in nuilva-vmiam-rafsbsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de09c4d81d3bc036a588fe55c112b9374482a09da46366e314f253968ee65bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178356 Malicious code in rusdi-set-ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9d43452fb6cce6694246e6d2d998d029e4df6dbe932129c18aa25e57d8893c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghih-fifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69ec4aea8793c2b723423888521a3bee58afed4d97d529ae743041d91bb8abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sayyya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eda4a1611e4afa5c4eb7b3ca7144067a91f234dae3cfe98deb408cc1355488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infarudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe39b83c55cecd956983ccbb56cf50174f84e226666554cd233100a7ba37263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautu-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf177c882841f4892fcd87fce7b1a0c5d4771a6a27319d0d356c8a45d9240df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nudanif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4c4547b5c0e03a80dd581fa0cf1c2ff5690339d3fa043140e73bc26a41e441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutai-ivabaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3271ede40bb57fce1e1f7ded9f3f850af35722851dfdb266c386a01aaa7b1c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76283a5a80703064e8141a2de2fb79e83c64c3e08d7f4a72ccf032a2adbab3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172938 Malicious code in anidata-hauli-mul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957d63d9d916beb40c91a3d9c419f1e80cb82ab563a4d520d55f905a6a276225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176067 Malicious code in miftah-miftah21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49a46ea199403d63614d67dccf0aa5101539d3b65bd4c957f12a4f8a7e03f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173436 Malicious code in buta-fipoa-ihdsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f11f21934ad74510e32bfed572f32a67715f58f5b7fed8fb9a880205c5c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177641 Malicious code in polymer-afaj-rofidsafafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f999052e3a1461b0d4351b915dab2b3c8fb845569e7fd5b44afb6f73290684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174012 Malicious code in diva-turai-inusunja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55d6fafe29b44a2f118595a317935e0751b7ad1a12cad15202c168134a73f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173856 Malicious code in diva-bai-imbufaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6526da3940677e59fc1f6d10e97018b854cf9be1430c6fcb889b1cd7d675e7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175091 Malicious code in kapio-samunu-mavvma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989216cacfce54ab561c53f2594e96f07ae703fd1f9a0f0d16f45967069e8940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176892 Malicious code in nuragi-sutau-guiavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd79936b320058dd1bbfcb8e3c5fc9833c2a7b811242646d6e1ff9636054d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174851 Malicious code in hunimi-satihu-anagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a446728b68cbde410a2cc7bbd1d1692cc83e5df3bee1525482c17e1e67dc5b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174956 Malicious code in ira-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffe37c6b585dc420bdd056d2833d9489e92c2ce036f8984d02625e4c7f8fafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...