MAL-2025-178315 Malicious code in riya-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c06393078ab01499d4dc9be643be08885b3f232aa4449ad1637b973ffb06fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174538 Malicious code in hakim-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14a8282840eb38da19874f556ffa957635d8c5577bd6eea4e1f08c481d221c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179148 Malicious code in thambi-yutrs-butsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b6d82fed2f148761a38abcc049ceacd12c88172a02a850baa965ded98388c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-sau-mima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467ea3f6db975e79413d77d44b808d93cc695a0ffc6420b7198ca858146c988a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174266 Malicious code in godiva-tumva-dilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65c3ca1ca91367ee7c91a0c483d4a040a1cfc1eb2ec659676dde20371b19fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175767 Malicious code in kupaio-kullaa-jijoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d2d82ddb040adc3772aa4dfe17243f9d3a9364f4d0685859d082d3c5abb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178520 Malicious code in sahuar-satidfaf-fbfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505191fedc618015740b324135b1898cfb500db527ddeb29eba3021db7cf8fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakafafswaofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e1553bd85c6b9569cdc3ff6bf8c2ee3bf9cbd8c77a16ca84f9fe7fa39e46d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaisoim-olosdssika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e1627a64cc789e490dcd2c74c8f7eb988056795c7ed0ce3145bf939ffb0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusafaia-nusafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a43d6ab5031baa05c2e5cdc5a15e87f242de6876319585db9a9db3808516f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-houd-mavid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d353e0d28060ddbdca4a76f167a248ba1524e29600dfe3e1959050cdd926c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfudadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addc95532b427c2af72a34f3d71c35b77856d06c172564ac5fd07f8175b2b4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiha-agh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73626dcd7e2128da9fb654e9d7441024a2801c6853f229af514a8d39a23f7da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-gomagiaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e901a938207a1ef419289392accc7bb1b6fdb545c26844f8705845fa69e8bf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db57a374c8ab46eb15dcc1c1a9aff916b131d4b4177785ad1c4e57fe62bb2069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmm-rucsivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4897f6edd5632c090be92e8cdcdc1af488e6e1cc7a03fbc1a9c902d4a9ecd171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boiuna-gaiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28aa605c872682d6a8cfb07f38a70b713eb1dbc4086a59f7b227be703e9a6c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuramagi-sutaf-daugufuida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930babeb1e344c4f3182d4c3ae44a8c53fbb58939468a7d4d37d21758138023b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daarde-gidafogf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8285607e4213b4431bb977dcff6734b2235c540e0d43741acbba9d480b3e4d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f8e83f3286edaec5d8d809e59fca500f803103281ce4b09d5d3124a06b1eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...