MAL-2025-176777 Malicious code in nuilva-dakdre-akogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50929131152442dc3531af794274958374307cc3293aa31ecd8b047fe900420b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174587 Malicious code in haritono-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb218e8431edf270a16ec3db82db531fa594659a5daadf677e8643e795577932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178889 Malicious code in teadod-rsi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c8a0427a7b5d2bbc3d3b681ce544c815d234116d90399bff5d08beb36bdea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172641 Malicious code in @ryliefrey/rylie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c20d975441437de82ae333f6255fd3375f1a2a2f7734eb9f9ea08082ebd8267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174369 Malicious code in goodafin-nuiya-gifia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1279d7b7f18eba999c739ba9f3e9dbc33ff0006b8a10490d8bcb5dbca77acb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177829 Malicious code in polymer-avoafifa-afma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbc4360f6a2c963a4515c8bd2540f45016c1d2446c0e3519e9c5c953e51d70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172862 Malicious code in anak-jalanan-mdn7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfdd6ac7fd3296a99d7d27b6a2f0c7fc5b55c05d5c8a96d7cfbe92ebc1ca4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179269 Malicious code in try-utudru-nudy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853ac4f853d38287e282ea9cf3c5a7ff174f9e7f45d3c2d72b6c694a3fcf9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177048 Malicious code in nuyar-adamir-bria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008faaafcdd805769fa06d1270c5ef8ac68e41f2d88cc13bede721e4236a9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176363 Malicious code in nokire-kushina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ffaeaf67256d3665e2c948e2037a5ab3f7bc9d18cff28899f9216d5544597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nusady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1340054155ce91aa47c9834871d451da0ed26e7e1023b47096524eb70cd0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-ailolia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785315533d065790ac193ad57b3afdc3604b1d083c065115ac4236197933be78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imuabuamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8cf9423b5c4b312e0c19a6905b6b71a94462a150f1f567b1c316bdf4778631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vds-yusnista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58334fbbd276685917a121617404bbf6c08cc78321e3e85a57aee26b3a4ac201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dac5ae5af84f9f30e513fd3a75cb85153ddb7d91568c90a232b9516290c8202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-farsavamvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5a997fac737545a7b134eb051390afef6bb6ccc23ed2f34ed020bedeb3cf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-iafa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a24cbe56a8bf27d024e635502c10ee8f5eb56efc222300befb08aa70e4ec998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuam-inyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d6fd78e191111c0153941782cc033cbb4714b01065fa847aa0c4010501c55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f48e21d2a69aed23d5bbef62120a4235aa80ac163cecce988835c405eecf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef7118b38c8c3a55564fc1c4a30fc71b62428622f6e96bba15d7d6ed6c1b200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...