MAL-2025-174084 Malicious code in divata-tugabui-iuvac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5147ad715d421f0e36b1ab2b763cce2d9a94dc4bbc55962766edf6d2790283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175667 Malicious code in kuku-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61c337015840f65d6353aea7cf580b08b71735ae62b9213b69ef01c70094aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175196 Malicious code in kapvino-socnvi-boobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6ff038bf847d179dd41a3763dc9f63019fdb39a00583ac1e2f32a8f435e2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175262 Malicious code in kapvino-socvni-gbfafaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05de146209557d41b0cbae49a82b6356556b43490b47e5af1e04ae01aeecd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175733 Malicious code in kupaio-kulaa-jiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882a40b4d020fa64b8c0f9f23b8e4d54a53112fb761b944a3dd0b807d9f748d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce34145344df432a76c3c5dd014319c6ab1c04cca29e566d57e61f9f61284813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1d6c073763dc0cad661726cc11e0d46fa6e025f814a92a0a1e23890cc3b067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaghuaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce051774213a763606f7c315cc465e722516179cec69806edee7d7027659575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074bb0fe743414d08d7d9e6605a846e576c930bd565f47ee356d21e71c5422ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca9564dd9849dcdc1a09d116a31e9f235f6c71ad5cf97ee811b54271993d0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0c52264b5e3fdb005dd41d31b80724487aca4d7d95d3712b46d2a627270f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1d309c8fce814950c1bff216be47b84ddc3187cb8468d6720c0bb1bc0ad617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-banerdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e72502c09a425c9629f350566de8be6ab5b61bed779d5070f55be682c53721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adar-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4116d7d3bcd455ec1ca41fe512e20e6ae0593bdc74b3aa2069f3580d170fda9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee1b3ab8390352c288a29cf58c99fecb3c6ddb4b45901fb87b33c679e7fff9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-erdsa-buysa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b923ac2b5f64de3a958098360b32125c54754d30dd01386ee7489d5bbb7d53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-fagiafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb84d963dd4ea50bc4f5e62ac6655216bc281b80344befd0dc75d32826602e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutabi-ivabagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52b38f56dc6b8ff0bc92ea727407a192889b9b197c1a0bcc29462c7c33bdf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awwwwa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b622c4673eb706ee6af651cff7396704c7eca96a99dd572f4177c111c50df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173816 Malicious code in digo-kaimi-aiokoalamavki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b5167d65cb305e55f4fdbd46537284808a9a35c3f3e8cf971ab91c28d298a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...