MAL-2025-175464 Malicious code in kapvino-sovni-sgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf668712d0c36a70bf7564ef4e43aad6bbb398b6ab63282698662443a71881ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175905 Malicious code in mahiu-sautug-iafaggf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1653a485c5045b49e3e2085c8a665990eaa5637b48b175f3c2f68602de7824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174044 Malicious code in divata-tubi-iva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60c7f8182c6ae131b97957328e0d2053411979a491fcb03a9923a34909bfb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179071 Malicious code in thambi-rafa-retds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bcb805da92e605593d0dca086f6e65d124f4aa005d1398e873a0fc1349d14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-dauaufida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9278694edd5f6a1d8357f5c78c08399128d1389645a759f0e625accaed25c039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177409 Malicious code in poglymer-ogmimh-amfoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4b2846219e8ddd46f7759cf7c07e922e488290d924b3197afaa6f05a3e0949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176897 Malicious code in nuragi-sutaufia-dagug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7ff1ebd7bd1b9eab779210cac49155a20544efb2b161706dcd4d9cdb206000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173429 Malicious code in buta-fipajapanoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8dcb7dc295e81c2d67d1d4bcc798f9ffdebbbe56c507e2b8cbb6e67cb4a73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175183 Malicious code in kapvino-socni-fuvdavaaibopva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82bde44b8bbc3e67eb808c2eaa9efc15ff952d7609e44bf35b9842a75e3367de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175540 Malicious code in koko-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f99ad31ed4279b2b152f3f5307d8961ede4dbcb570c028125297fd41117916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178178 Malicious code in rindaman-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a966981ad998b55e6e87d31dcf8d23cc861baad59f7a557d901708cbca0d6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butauahur-sofauiui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc423753e6051cbae622c66259444fb6e66e348cf529cbc5ce185df3646b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butauahur-sofi-dosapifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a070c8cd6e47840ddd3957aefcddf025883e08532bb369d148b2c6200d53bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kangasa0-nuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b3bd2a80f6e8a5b928a230c1aa59484542aa9ba56f22822ae55ea93d32c11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-munvavidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8206d24e9c67d36dd2fca355db83e94cc7c843ce709e16774226587e0caca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a68d3ede75dd2560d76f90104b8fe6981a3553755e8b4983edf85995ba1d363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-bidufatad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfdaf05e7bec23525a8e8d381c0874f6f0c2c4b92873018313b7f2fbb60dd5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abbc62151bbb77a6a55a92993594e19d7944af9f5014608c43a3ebe73e18439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4e0300c13c2602470e67f97910db22e22df755551c6f0583e85e3e50353ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopafafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30634cb86813b88c2ee9e4357e63a13e3c1450eb22569fd1d40b4d072d7f9d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...