MAL-2025-176559 Malicious code in nuilva-avaim-rusiavantina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da063cf8e1119de3fedfa243c9d34c4ef2187695cc34ae4d880278f51b033699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179289 Malicious code in tusaya-s-sdesasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6235449b77dc1f2eb8f8250e111539fd27445edb1c784abaa02f72e76643f2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175428 Malicious code in kapvino-sovni-faffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12576bf4e46353e9b69d015bac21293a7abf2170710edf32d5f00686e9b3b923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178749 Malicious code in tanabufir-softafai-dubuati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c9eeec500261ce7c52b8192e80175a20ceb1468c71394959a932d0d80b5cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178412 Malicious code in sahnim-sati-anjifangaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada91e8be789ff1a473821536fc1f57880fc91e0083811b8c7fe43c6f511a00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172810 Malicious code in alvino-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470dca2cc7bc4be8bc7566325d1b87239b9f538360edcaf28bb4d584cd7e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174230 Malicious code in goditu-tufabamia-dibtud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033b1d3e4d1c17b1db0a9e53d08c59b4c69b6a95e93da6b67f6f27be2fe1e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177714 Malicious code in polymer-afifa-gna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b611beebb8ab9fa09fdbbffd41de4c5a43e42543c5c7f36c6eb8f2e81f4bc17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173027 Malicious code in anita-haladodi-misaladania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3119a441cd53632bb0a85afb0e345a1d8d0cada17bdbed270df3420c5f88905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178058 Malicious code in polymer-idasiovagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772db65711da31ac9f2ca2210f8c9c86ff380849edf2ec83be6f33b37ed94622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaguaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45c4b67bc142c6f4be48d8ad4d39f4127dcf98372abd505d5eb02683660474b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-sat-ananin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d163bbb309bc6a2c6f61bb7096972f788de09d9c49827d454ff924ebede607ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agafafaagmmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bf8cb61ffea72da49d216cccabb7364250aaf83aa9c235c26a35d6560d2902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nura-sutif-dagibauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cfd3fff0a3b55cea4c9afbd836cb16a7beaf1ec75936ade5c9443da23464e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b17ab48f57d0c1b8031d0cfd8524492cf2e06ae5d5a894904d764f5464dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f1649027e4778ff8b5bae03311a094ef500932c52be08f0f3dc24391d1ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdai-dggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f9322bd9af4e9ee1fc6a16c4a64727a1749831f33fc881e60c186771279576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibasah-minfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17116201f4fc1ce2f12d20c6460e777067947fe54a7b51f55d75f942dfef0312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b18d103e1a6865d20fd4e2bccecb05247781f6d10cbfd8193759516cc0db3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-infduitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2b945b4be0530ad2607b294eba2fa6e6d8df51fd7ad1b0bf42b8078879a423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...