MAL-2025-174403 Malicious code in goodafiun-tufa-fgifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2d707a0765f5cbbc9c8655b02c96bb99497570fa988d2e676cd0d0647fbd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179179 Malicious code in thumbi-vss-budi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fabf03b69292801a5c5b1fa40eb540b20933d0b673d2dcf8916589e0f2f4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178311 Malicious code in riya-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608e40c8e786100973cee06caa213f036afec4a001f62e8ba66260cce4acee4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172857 Malicious code in anak-jalanan-mdn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a297e0df8279fc09bebaee521bfec9ec4cc28aa98eb93e9c8e827c8a9158e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176278 Malicious code in namada-kang0-tin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed8ae2a13d0dea670f11a0d534c2584eab59459a3cb335957df30fc961f4a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179210 Malicious code in tray-iutup-ubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363455a61ab1e09dd7d5a86bd4f60bd24802a66af6443d7a41120a5f74288f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175497 Malicious code in kiki-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f95ca22d6a62c3e502a2cd56d95b164f63854243e324c1f6762e7d60c070031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174978 Malicious code in ira-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c82cd57eb593f063a58d8aad219ec849d8ee9dea84ea11ac424d212cb59b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179206 Malicious code in tray-iutup-nusady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1340054155ce91aa47c9834871d451da0ed26e7e1023b47096524eb70cd0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175627 Malicious code in ksai-kil-kokaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f37a7095b8e842ab370b1baa79078aa7c8cac6cc1f1f29cf7b3dfabcb5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172965 Malicious code in anidata-hds-matsfad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84fe80ad4a17b9fb4c24eeb0c31650a89335c6080dba247424a68162c30a04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f72f2e7087ce06336c8cbb693b5cdb750479066a8f49df1a58c7f9e54c8c9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4140ad4dc3a20f0c7c46b05f6d6f8a32046db3a79490cfd8fa434691cc364a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172191 Malicious code in augis-lepaod-matiparah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264162510547047e9c4464f0fed342ef71dbbeb81924b6e3b7fe974acf7950a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172520 Malicious code in verts-otigo-nahgiaigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0cdb49c852c6e5f72cf868b9c79673ea15a496783f6c2c40dcfdb4311c1146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172541 Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maevekelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376373d830b5b9c73f83e3fc78016edcc3c8c40456c4c8426452dc89a5af5a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171277 Malicious code in graceward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c670bd7a862cfb51104615367cc1bd1eb1880fe3eaadc996e7f65dfc91fd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saoirsedonnelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa22d1c89dd2641d39dc495da4393354374c3ebcd9efaa4979a3fe8a578c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in badrchocolat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660a9257b4a9ea40a67d3cb5c5f37d56ba38a9b11e19230522625a3c4190d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...