MAL-2025-175360 Malicious code in kapvino-soi-fava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa919cb5fa336140b6f69ebd4ed349a9b5b7ca644dece5db4edb9ebc6fbd4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176053 Malicious code in miftah-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a866add197e2c4e87cd122b035296a6731853c9e1c171de8fc9fd551df6b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173301 Malicious code in buta-faa-saiiagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf6fa4edb2e8cf7eaa817b011ed9258a4a53297e8230a5f1fd8943d3c064a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178100 Malicious code in polymer-tehh-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8005420f14b73e1818fdd4cc898cca4592448fa7dbfa825030acf466837db330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175196 Malicious code in kapvino-socnvi-boobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6ff038bf847d179dd41a3763dc9f63019fdb39a00583ac1e2f32a8f435e2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174745 Malicious code in hokage-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1f527724b00de281b34ab4e3d27d9329971eb1e87e614a0562dd59b365a22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175523 Malicious code in kim-jiwon-me (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09000f631a615d871f4787e2d3082d0880daf64c6838e85a632c479379bba9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174831 Malicious code in hunimana-satigub-naifboaib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff79c10f496b79b8143c5fcb9653b276231969821ff389d5d3950815cd76241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173924 Malicious code in diva-banifbo-imiaugai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1abfd95e50c51228791999e162f9d199edab57395b756ab4766aa100a51f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175262 Malicious code in kapvino-socvni-gbfafaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05de146209557d41b0cbae49a82b6356556b43490b47e5af1e04ae01aeecd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176306 Malicious code in nokire-kaguya16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c854e98f15c8624e8d0ecf0d5bc0aa34684cb46e0f9b48ebf731a3a9755f65b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177912 Malicious code in polymer-datdfadsid-dora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2391ff8005197875595bd3f446b394863152251b6b323adc9af31e703cbd32f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25531baa36e37160c4039ef75cbcf137bbff882c53c3521bd38a0433432c959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1d309c8fce814950c1bff216be47b84ddc3187cb8468d6720c0bb1bc0ad617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee1b3ab8390352c288a29cf58c99fecb3c6ddb4b45901fb87b33c679e7fff9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-nuata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f16b1fafbeb55aa95213e1b29b71d044df81e239c2e65c73c0d876227e6d8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-erdsa-buysa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b923ac2b5f64de3a958098360b32125c54754d30dd01386ee7489d5bbb7d53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1d6c073763dc0cad661726cc11e0d46fa6e025f814a92a0a1e23890cc3b067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awwwwa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b622c4673eb706ee6af651cff7396704c7eca96a99dd572f4177c111c50df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb84d963dd4ea50bc4f5e62ac6655216bc281b80344befd0dc75d32826602e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...