MAL-2025-176393 Malicious code in nokire-kushiya4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257d922371cb342807eecc6e4a3511ec5fe10e23861c6afadfcf07b937b45647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179303 Malicious code in unimna-saafi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 677215067f91aa93fa26d3fa91f716043b193b7a974c429dbeb3e1357141bed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177709 Malicious code in polymer-afia-gomgabafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14a6325dbd3b549814aee1ed8233a9c48ca3f66311e8564c06193eb56035607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174357 Malicious code in goodafin-nuig-gibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15ebcb30fb7955e68a075d1789a11b93db04ef9e6b4e3d5806059f29e3f5bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175793 Malicious code in kupaio-uloka-jakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96440850fbd6531b8a95eec0cf0fca2c4f3384c30a80f3492c963e0d1dc5a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-igaigna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c8730c458c4758493cca40185f4fc5dd25d3325c752a2cbfc4a8e3562dddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajapnoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faede7e7ad450b34b3018a867920beb780674c165229dc889cba3348c149a461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82b97107164ffe08f3fcceb73280bda78a6577dc8ac8b2f0307ffe744727524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-agiggsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18dd46458c5522d8252650ff21010ee55acce88b174b8dec3ef654ac4dee5b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manuyat-mayasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7298aa9721d94870d8d23e265fc8c5d2f2c832701de2a6f600972d759544ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adaoag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36e2740f1fbb3b3581562783738b28b7a70af64d9f482d0f45168def01421e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53b7a6be570044878596dc1ec5b6a7bce979ceb11bbb466242d1cd3a2be4035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minds-natudfa-vusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdc72f27e97ee60cabc2979ddf7a39225b009836d153820fdf7c67b5981105f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a5a8c8b81836128cc0be516d8cc5f39ae395b4320ca7082d314b4d68deb7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-daurufufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f6279e6513f93397be98db0ca4ae509300a09553b1c962755d0bce57ab711a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoadfifa-abohoadfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68246f984927f7bce790ac473c1def9baedbf1e6bc22b380234ab061ab879959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afajf-roiffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23478f24cf4c080c940c1266dd2274a274a923ee7511443f3f6e4abe8e1ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-matsafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8bc040152dfd20d7334b428d8804fef743ac351fbc7b4737b29c142eb43689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ibhghhsgsabo-sgahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbc8470bed869eadd6ecce600a4e282a7a6f77858b82972929ea4763b6cdda6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...