MAL-2025-176624 Malicious code in nuilva-avmim-rucopoivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4b56a3173c6c0f57e6d565210062494fc40cc5d2492b7401589f34d19947be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172636 Malicious code in @mipta1/r2seads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4065dd1a960c3fb93d4e52b6d8eedf94014df0020f347fc1804019456563da0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-ihdsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f11f21934ad74510e32bfed572f32a67715f58f5b7fed8fb9a880205c5c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176082 Malicious code in miftah-miftah9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814504a2df4c57e9dfb6d8a565e3bfeb4918352403e3f839604c4528798e74a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175559 Malicious code in koko-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59642cca90d293395b202a5c62002affb90c80de9bdabedc70d3af9cd47bf52c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175410 Malicious code in kapvino-soni-favavri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db44ee698778602551881e4f3c4b26d6bef6082dcf779f2f8af6b14e782b3484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fna-nafifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53bbf5c9b746a81d8112555b79bc8af1e70779099750f80752fe5b87743b50a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banbfo-imungbgsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3916dcaada7df1a51751e65fdafb32c9499c26813ba1539fa866e5f16ccb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174070 Malicious code in divata-tugabi-ivacfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea4447591452880b229dec26d2cfbbe652db695925eea5f7df6a78c788e6da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174504 Malicious code in goodan-ngasa-abainafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d00b72a48d32fb6463b755bb21d981373799cc45ad49c27136c2db9736a907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178082 Malicious code in polymer-reyta-biuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e994fc75adf0456546fa621207c12c83f50334af839d49ff68c1f2e2d3dab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4dc20a983854cf2efd88c0a8b59f8a97f9304df8b33b4f8088d80d18992e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175425 Malicious code in kapvino-soni-fuvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9501c7840043a1ec0b6767a3808894d1d57e52ad81d8c0b923934dc926d166f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-angafaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7da81e63f2f014bcd3667646ae2a2f4e113897dedbad262032d7f1b70b48f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176030 Malicious code in mibadsdadh-natufa-munfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ffa48b5236d1d4328f6501d8705f9061ecf33db8006e09b1ba292fb1fd9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177256 Malicious code in poglymer-oggh-agaahgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1461ab894aa2c8242b89c4d4ef8f7793f93c55f0afd9c7ae440c30dcc8a1ee90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-grs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f02ad38697cd673544ca7f694586c335514cb142c56463d9dd703c3c499229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a68326d0eec426a6b349962027895601267885384da04c538c3b37f214ae68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-podr-gulsaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32aecdc79f5ff272c28da8ea77aeac24d2707c2f5fb1df58584f03057e01e415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-faoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13035452e8c84f539b0f065f8c7440fe2c6aacb752bf4e7568e51f527d4c463a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...