MAL-2025-174261 Malicious code in godiv-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdb70926edd32967987e67c855c8ffdf820c17bea167c832e4192806375a777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174587 Malicious code in haritono-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb218e8431edf270a16ec3db82db531fa594659a5daadf677e8643e795577932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172862 Malicious code in anak-jalanan-mdn7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfdd6ac7fd3296a99d7d27b6a2f0c7fc5b55c05d5c8a96d7cfbe92ebc1ca4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in go-tumva-diabilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a259407d5bee0272c1c54dec3bdf3bd9d93efd1c99ac059e22badca298543a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fabasifaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d6e26d07096698a916e5f8454d6c05a777bb36f43fbbe3df9398d39b770b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gfhgai-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82b0c042a661f9c2fb7fd7ad22b496b3ad5249702fa16c41e678b6a80a13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fiffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038f4ce8f564aaaa5b45682bcdcd4277f70b7e87bdb241c8353e58b7562e05d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hakim-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a6e5d27d6d7c4dee5df04c3054b1fad0608567d1a377c43c9a9833c4e9f96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-famabavpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce5beabf2fd622f14f01e01caae8f8c1bec2e34f0c1537b212da5bf4bf99596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-ammfaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7945570bd45d1049ad694f898c0f348ee960035e113ba2aa8b87bdba0b1ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabui-iumavifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6145befd1f8e3146a0a7e757321e2b898b06cd29159122e0ce8e249228f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosoganfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc4fd51131943de3f6c9ab378629e96359427ffb42eb4e404f90e5a362d9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanuga-nutabaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acfc27b966e19fcdedc60238a5b29a113fbcc631931f600d9fc789cfdc5d1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f1173e914293848277dc10dd55f818e7011f187015e39d1612aa37e46a612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2a35e628460ea35948fe6b9d029814253cce249bd70459f9d1db895b0635e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-afiavagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae60ea6f7ff73a6b0bc4857aa0073a192849fb1b1b4d60a323fb4a98afb66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d30c1d046e2da33f5064cd6aebc3a53d1beb718396176b188c08d3c9777331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutau-gaviog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e419f29ccb5ad462063646daf78645b00e07e8714909f5f18789a712e337ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174619 Malicious code in hitachi-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff1cad525eaac9e84e01f34831802bdb0387c108e2f16eecac2250cac5a1318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177323 Malicious code in poglymer-ogih-gafiggaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b35cf8c758dabf771ed2653e8c4cc2630562244e7522758aec06248579f94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...