MAL-2025-175306 Malicious code in kapvino-sofagfgdi-ugafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef65a24bf45c37629e2c2ee179699e2ae7f939963d70203c2b70edb7d561eefa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178833 Malicious code in tauhur-sofi-diharuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c91d7764d791fdb99597f6b9b49974d60cc46404e1837f67bd0da75e277edd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178460 Malicious code in sahu-satsag-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1de466ad9238bb4c890446244ca87e23b3b9ddfce25d7ba502ff596c497c61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiokimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257e63d6146f9d4e3a108c20db3583728bec0ec47f2841678fdeaa81f224cf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e44261c3d2b7fc1a0c4031b125450d40bdd850b61f8617c36eeefbbdae128aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172904 Malicious code in anidata-hadis-reda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9bc5dd58058be1c7e33146fd65d4a2eea974cbb4b1366585f8c293840e1600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178011 Malicious code in polymer-ib-agaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65606088704655e643b8ac706cee3897e996eb3a2fa4f400388e1cf9545736bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172923 Malicious code in anidata-hapdits-risadpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dcdfead17df48ebe4d556ddd0d78f3cae6779499c6ece838b6fd529317ae9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-mipta19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa829b15361d27005d8f825da10ea6247e0af55c019676b004daf64ec9e04aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kais-aaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15fd3adb93a2fc33d82181b64aeb308b94ae18dbaca0028423ad8e67e030b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172858 Malicious code in anak-jalanan-mdn48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3477ddd3ad76b0578c4ef91c3b7b3d2f996354d776d0ac93b870656fc2d83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaigana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f55b99e3a0061fda4ab2cb04028e6e97202d1037b3f7b9a325b61ee3a17e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ahgiha-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55956ce0a9a3a9b865a7ce4964025e1590637296a5c0ca7c87f9bdb11dae0261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-dfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729ecd92913ec880f26f1e0e3118f0415218a26d57f560a05d88bc38474c7d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175727 Malicious code in kupaio-kula-jokosim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4576b12db1a954439c7eff32cb8dea1726dcd5e7703c0016c910e15585a33c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuvafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2afa8e155ebe4ddba158d620bb6adfbe36025661c47606bb2e90d896febe24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177945 Malicious code in polymer-fsda-refus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a39f8aad177520196775229688051f982f9bbaa8d5da17c8493d8a23ccf401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-bani-imbaabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb95e4ded4283d2f8997445fece4f2c8d9b4d19ebd978c8d04957163aa0a34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d0e260223f563342c5e666ce491667066c163fabda839a08e5454e9c104cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yundisk-butsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e06307489c5e1016100eb0d9564e39bdc7790864ef1c1ce38646d7b4341b67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...