MAL-2025-176622 Malicious code in nuilva-avmim-rucooivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52357a9e60f7a5d03fd36696ea87afca679512ea3f20c20f804c3e563184999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177332 Malicious code in poglymer-ogih-gaghuaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce051774213a763606f7c315cc465e722516179cec69806edee7d7027659575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176579 Malicious code in nuilva-avim-rv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13d9787aa98399c2490fd512a9807c74508a0518b906f25c2322a5372eb9432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vainafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef59a88dc85f91f7d870aafd28370edb96c1bd1517128ccdeb84e685f133ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-sohyun-memeq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cb5b64113ab869583e87ebb189eb75513270c25e6056eec5d041f93ae37b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avof-agao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b826347eda7ce3d668cce6127b6a782d0536b22c5e37bdeeae392b403b48411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca9564dd9849dcdc1a09d116a31e9f235f6c71ad5cf97ee811b54271993d0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imungbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3916dcaada7df1a51751e65fdafb32c9499c26813ba1539fa866e5f16ccb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fagub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44958e3dd2863021c62d53b7d8ff7050223475bd1e2baa27f39efb160645b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4f824acbda85aa5df7b2f97cd79653f753b5b0ff09facfe7cf2a0160e69b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c9f3a45c3e9c1d94d6a489f9f8291d4759490766a68875271795c7806409d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-avigpafdoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2edcbd6c1a3cb86aebf3e402f2f4722c123d6e4644d751e607bec66cea7dedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rofdaaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33116f2ed6a4fdea8b7ee8c8779efbb663d8f392ba5100703bffea3133494a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-tabafdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b02712572f68bcde48db2a82d423d1d07efde051c0923ee65b48fc33f6cce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akeeee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee69335802c1eafc050336ad53a5165f6519ce80537b20d4c541206e8a35935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c413f5f9782a182ef5e24ae2aaa14b483dd80e4900be2b844a84f6b048ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-afiafdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfdf62bd2d08c6a6d58b61bb2b24f0e9a360c2562b1d9aa1d5e8e4f13338df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e363547f417a2422fe0dd24f048dda31d8cc46f2a05f193ed8058a4ebb67c71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibbo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eb1f7c599d67cc0c18a184ff608717f8a9c3d9fdbbc0f1f94effc365ff5070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...