MAL-2025-172787 Malicious code in alvino-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8509e8e7891f4ea1d9aa5c498dd0c9d44724707005628e64a383425d94a2c4cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53bbf5c9b746a81d8112555b79bc8af1e70779099750f80752fe5b87743b50a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177567 Malicious code in polymer-aavof-afafvbagdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727ef9ea5ca0213c7ee670a2881b53bc4387ae1565c4cb7d39b76fab1f3e303b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173503 Malicious code in buta-fsbina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21658bf5f2eaa42fbd83ea245308cf4d906bbadd810038cbf66d8c7e125657be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173424 Malicious code in buta-fiona-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f62002f395ff3aed799fcbdda1a49ca9a1dfb660fd3faed3e8c42d55b08a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174337 Malicious code in goodafin-nui-nagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889e215bc91361a109c11396e46ba36720434cab4f384a59d6209b32aa335f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174016 Malicious code in diva-tutabi-ivbgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214472c5bd4b1374d5db44bc8b37dd2309beb3deec57d36108f2b68fe9f8a9f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175236 Malicious code in kapvino-socvni-bssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd649041c68d565926965d1809521e84760c7cdac865bb2c933dda906b5941e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178820 Malicious code in tanuria-safafai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b1c8d3db573ced2f426a7f99988df2772a698ebb204eb2dd66a3b30d0cefce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177035 Malicious code in nuyar-adamir-adaraamsafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4650c3fd59a451fcf343f99c1f793527590a5e9fde29de20027e6bc4caf01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176382 Malicious code in nokire-kushiya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23839a60f08396da07b7ed703cdbfad6c8cd456aa1997b46b8b7f875d0ead384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178130 Malicious code in polymer-tresfd-tehdteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d320938913497cbf477f5892104abb93ab5e06b2e960a9a602325c818230e8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satu-angifaafiug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7391f473da2147c0d8c608e5d532bbda1385932f69922c9dcf70468d0959cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174291 Malicious code in goodaan-ngafsa-nfuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2819493aa637019e8e8a5cc4400c443930d3a0f13320ecfcfa53f2e512fded7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177098 Malicious code in nuyar-adudar-badya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c9245ee249f2c882e929118252ab415f43d94793d5cc0fbf0153bf159776e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177920 Malicious code in polymer-datdfsadsid-raadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3407d3714f07af923c07d0971fcc52c312c03361493ea435438b1f0a19575155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178839 Malicious code in tauhur-sofi-dihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252d8da77df5ed5ad3b95cc60c5fca6078c21f34b56525684b1e180d7d490b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174668 Malicious code in hitachi-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e932fcca28caa0f23d3367e4b9276ac427f4ae0038ef2a2f17ca9b155fcb03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a417b90c66a6eb188e18aa86983315225b06429cce83b9252531905aeb9de83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178192 Malicious code in rindaman-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeca8a80eafe6007df60bbfcc81f3f044eb28a13618f45bf3562036165f19d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...