MAL-2025-174255 Malicious code in goditu-tumva-did (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3aa938529dd100e438ab3a6431c063ba04adef8cc5d5d44b7cfbfbbc85958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177146 Malicious code in nuyar-da-rofdaadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60cae2c6f7f33a98e921aa58101a939abf1809de72a3ab7c1a28bf8b51a284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175554 Malicious code in koko-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f0a4e8a8add22b8d8eead9e1af3ca221d1599ad221facbd5cf636f739838bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177098 Malicious code in nuyar-adudar-badya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c9245ee249f2c882e929118252ab415f43d94793d5cc0fbf0153bf159776e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176836 Malicious code in nuilva-dare-aaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce24cb915e4b2f2847ffac6f78d36ac81fe468809275666fc458aa9242f22ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175034 Malicious code in jooee-banut-imubuabr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f2397175291fe06223776892796484645745e744d2878bda97f1c09cf248cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faefb224d6fed2086a636cb1f92a210a8c229120852a18caa93c142d55317fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173976 Malicious code in diva-tugafai-imagiuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2bf379c2571fa8a848ca94ccf5512522291bccbd783bb3bbf572e25e6b39db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174124 Malicious code in erftads-eredd-versd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6c5e6a7dd410ccb750f9bfbef255a1737f37748c4366fca47dcfbce488fb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176513 Malicious code in nokire-tanjiro27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60102d0337444528d9dbe8c8b067d06a8afb6ab1ab4420afb4fda5be0bb6cb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173942 Malicious code in diva-banubo-imanmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02605cb289f3a17196c9de3daa336fc2bbdb8e472fe04105684c37ccbad397b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173458 Malicious code in buta-fippoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36065b481e6a544d64cdef291a15ffcf9182f460687dd421cc83832cf5ad03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176369 Malicious code in nokire-kushina46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a215168efb4c76502829c24236b601975993225945cc8911a164b355f2abb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172787 Malicious code in alvino-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8509e8e7891f4ea1d9aa5c498dd0c9d44724707005628e64a383425d94a2c4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaocil5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f259b1fd42decc26be00236ebfdb8ee378dc219dd060e0f40d0d4b6962a5275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-diaufauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3b355d1aa718888c72a079699c095ad2d591db74d38d2c32160e2eb024f3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2708d098861703287f7625978c0965d79ff7d6401e1be98ec2aa40391e6b347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/esdras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fd6fd53bd4cc493421831134e87705c1b0b2c9983922654eae302163f06ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-ffia-pafasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590440632645cb647dc463ed98b2187eb29a5c15a13d313a9057bea8ad0e625e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butauahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68e228f7130d33c1fab1c30145bf7ed32673d4371baf6e3da69d040d958cafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...