MAL-2025-174051 Malicious code in divata-tuga-ivabaitnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5361888a3751e6e60fb728b80112e4c5d564ec59c9b93eaa6e7a5ad11def3a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-naigoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3501434d42add4301975b9bafd154120133e7f786f6c88c86bed8d97811c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimia-satihb-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ce7b681be23d288cfb89541c6c45cc14a5493f864ee8d86706a635dd7499d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-roffafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84b3e55fbae73dc843c99027774db298671e13d1f0965973f3d5ed7e38aaa88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodasbsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7c14b9f7084987e591715a2c9331bf601f441378a9466230fed8f8f54599da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da29d592d51e442d466c2b7f031a50400249d0b547efcb24d872ccf591a5d0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa19dd374c5940cdaadd57e3c29a4673b922e63f8f8c7811daa683dcc0645dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samnu-maimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6401f7f5d84a25aa05bd3d83fbb029c51e0b9ddf046d168ba5c38d21730ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178338 Malicious code in riya-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f99206a2ed5a38a289a86b3980c49d9ab9e9d38e42e593f22c6a0da17d690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9f29db439b11661b24134dd67c07e78374cf6e34bc780ca7c718602dfcc5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sadamuda-mimanada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3951bdf1274886dbbc5ddb919df1ad71bd50a6e5e1d06930fa02ce30f084f24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nutayuri-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad97d82a9ca6c0aa45b45756fabd13f3509ca41e5a29f16290e165f643df77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174538 Malicious code in hakim-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14a8282840eb38da19874f556ffa957635d8c5577bd6eea4e1f08c481d221c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafgsjkfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effb4855561635a5da3e51269e203f2e13a654d72dc50245cac1d789c43600fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df28d950e7774394bd017a7864be704cf5d331c532fc2078856f3474845f5335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175570 Malicious code in ksai-kais-aaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15fd3adb93a2fc33d82181b64aeb308b94ae18dbaca0028423ad8e67e030b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177576 Malicious code in polymer-adag-agisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8069005a84ea9426fdf9b0ab7f25359c6c22d470dbabde24b75cd2b63c9f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f95ca22d6a62c3e502a2cd56d95b164f63854243e324c1f6762e7d60c070031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177477 Malicious code in poglymer-ognagah-agshhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0ac6efb72690bf32e10b72eb4fda8bc79d500671b64851ac78055e4f80cce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174504 Malicious code in goodan-ngasa-abainafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d00b72a48d32fb6463b755bb21d981373799cc45ad49c27136c2db9736a907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...