MAL-2025-175333 Malicious code in kapvino-sofgdi-ugafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f563b0bd7e5b0799a16fcc7a7ff62fc087398919af8ec2e9c1c488cc143dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177631 Malicious code in polymer-afaj-ratfavdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d4d76f310bceb7b888006b4aa15dfc5db320b5a9ef597b208067099992960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177715 Malicious code in polymer-afifa-goma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12b54ce7758dfd689253ca037649e9e846d5f8acb6745dd1dc1f6b9f0948aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175819 Malicious code in kupaio-ulokia-jakaloakaanaoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87980d855aeb11f720046e31820de86bbfdda4142b52be3ca485be5f9c5797d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178964 Malicious code in teaha-erws-puluh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd544ac006a871874eed7ce9dfdbcaab85948083090e85b65c9ffcfa8e201b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172538 Malicious code in verts-otimmo-ffigagpgafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37af971a29cc9cd531bea9378f3982a5f10eb7fbc394526a47722fe2cd5f97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172144 Malicious code in aps-ledang-maanassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7540d8ef41409bf9b4f0220afc48bb67f127bfeea9b9059a61ad1f915fdc215f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172449 Malicious code in nabuf-otimon-gsaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d09244734b6d0a2efc334cc6a308b88aca79511aceb155713e8bb8f5b3e79b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170884 Malicious code in anikapatel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390bd89273617d3680e7abf0cb3e618e3fe9af19d7880ad10d6e1ec04012996a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171567 Malicious code in meteorseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643b48655213e56ad9709ac579d9b720fd41e6adca804c80579acc5c40d071bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marianabarbosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337668e0dea81d24037d6f489ada5791f9869c1356210345666d8c556e4f3eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatfa-buaat-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a61d5fb58c646607c00e9aedbc5bd8a4947adc89c034c5dde2d9c4a24f277f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaiggfaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a7a55a3f2040263be656d02dc5829d5e080ecdf3468e2ec72d9eb501b694bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5cead48b9aeb5793eae0468d13b5a584f4d7122a5f5443732acee54fe871f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ee720c69fa2056196ea48943e5b0317113faea88a91aa80093430b90d5197c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3fa430ba7e44f5fd7f75b44e2296dbe9cc67eeacb157f13b5cd95f00758c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusta-budda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fcc75dcccdcb7bdfd633bedd57623a11c19bb40ead0d51d2bcecbc050d2f58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banavali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bf78c793688fb3c0ef5de4709413263a1aaa0c3f841ea410e33b1cc285649b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865d04b4b677a6a39047ee5cec1e542211b9ab6259297797c3bf104703289ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rgyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7fa6d2d11d27bf4863b786b05e2e1a9a89f58476b7052dece8bd6926f18eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...