MAL-2025-175279 Malicious code in kapvino-socvnvi-bofafanavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baa15ef04b936a2c487f116e81662f39c6634054018f218f65f717b1aeba064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176476 Malicious code in nokire-nakaocil20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ee450bb8fe69dd5198e3a474e73baf009a1a9743f8c3a1a1f0d580ab38a762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179269 Malicious code in try-utudru-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853ac4f853d38287e282ea9cf3c5a7ff174f9e7f45d3c2d72b6c694a3fcf9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178822 Malicious code in tauahur-sofi-dosaih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7126e5d7daf07b007ccd0b6e033bfd6aa972a65c769a1fe8ef8d8e9e6aae4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175013 Malicious code in irfan-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33df34b2154ddeeada8aae922f3cb63ca0e40d0085880972b7a704cf66098ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177595 Malicious code in polymer-af-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27c822c670493ea25f440e6eaf47abd8f51bc885dbb196b2e56a190f39e532b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177607 Malicious code in polymer-afahf-rad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69cee21cbba0bce5f3220ba0f483b86a612c2caf3a41a18da46fe2c3475506c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176395 Malicious code in nokire-kushiya6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c80ede26acaf8b4cb9d6e68bbd5a7a3c134ef764206cbe9fa4d35c594e32fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174607 Malicious code in haruni-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42830369e521d7f0231b3d6fc601af2d8956aee1e99ecea64a3100ff0d479bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176341 Malicious code in nokire-kushina20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c5b751925aadd67ac64b31d63ad1be49f2bb33dfcf0f49ac514df151d9b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177862 Malicious code in polymer-avonadff-abdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93bf11b89357070037017dd8e27b6fe6cb2d82c1f9537464746d0c1f7354e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176515 Malicious code in nokire-tanjiro29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80845458c29519f2e5c34b210c97e2e6d4feb95e05b882e0d9faca1dd44ac6fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176243 Malicious code in musan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56118d9735bd9ede953681e42063a7830547ab78976e460e98660b7e84224f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172857 Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vainafds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef59a88dc85f91f7d870aafd28370edb96c1bd1517128ccdeb84e685f133ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0baba630c81bdcc7a7c26753f042ebd68da509b061f3da0823915f325c58bb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afofafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa77974690ce84b18547b1e266d307bd382a3932f36569d53bde2d77f2aa493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infarudui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e3668b860c6a00933c325e7cf283c1b0a5ff929b983e0e23ceac9664ed3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4e6270dac29a8f84fa31daf4e02e94e53f3b2af467cbf55335038b516c0347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manuat-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31eded59ea6b6bd82960c1d29d663ccdd320e60d4379361bca391cd7cb0b3d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...