MAL-2025-173673 Malicious code in butanaih-asfia-darfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d457d03867068ebb7a13a315c7ca92ee7c877c3d02eecb751f98f602fb699ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175015 Malicious code in irfan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96223725b029e497496127cece7eda48e22d176511168e0cbc294b69e3ba55d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176634 Malicious code in nuilva-avmm-rucsivsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4897f6edd5632c090be92e8cdcdc1af488e6e1cc7a03fbc1a9c902d4a9ecd171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178628 Malicious code in savion-goodmin-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e268770a42de3f2b48547a0c7826ff75ed93603155b381d1f4c161e1151ab836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179282 Malicious code in tusaya-s-asasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e94497e27316778c49b27f404433f722f82e4ef432b411dbc36907c53b875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175590 Malicious code in ksai-kaiso-ajola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c0df1f706284a8acb30a9885d21b5edbec04c08d44b7759299da7fd6212842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174768 Malicious code in hokage-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209f8a069b183c8d06b76de47c523e48634ace986b86f260cf2317f977601f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174706 Malicious code in hitachi-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a5a634b93427670cdcefd9406f38e61e6e847cef3b1172e4721e48bfb3abb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175045 Malicious code in kaka-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267028f45697198f1ecd1a1b834d86968e4e543ded6229bb11a080b9864e4184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177026 Malicious code in nuyar-adair-biurn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd97e3103a2bf5971ae1faff53f7b158931a8c32ea29694728d4e248671d4e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dubuati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c9eeec500261ce7c52b8192e80175a20ceb1468c71394959a932d0d80b5cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbda4b7cc759dc140abd5a2bf305812b96f82708d67d7e35928d65ad4980169c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngsafa-nidadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8d33cd7e6af62de6375a7fa28a66df084054430b1cf7ad62f97d574d721432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63f42d4100c01c4e2d2abb22d4db3ca0fa33ffd91974b132191b16465fc1cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-ref-trers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15b232fc23010556743ac7133744051f4911ee7f4c0a1e97f13eceb14ce3ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-gffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a651d85bccfd2ec3d6bff91faf18d80c9b919ba21fee431594d28a8ddd6bc0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724fb08c2a9e112bb1aa6fa78507fa0dfd3ea5618b72150858b8d7029e828c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb083f4de6cc8ea00b990d10d0ef88e4faa478bc34c5ca8ee73d16013aa3bad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagoimaiabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e68c3b8da6ce36564a394ea9983aeb08c16931767d49d30e7dc02de46c9b8c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fippoa-inaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36065b481e6a544d64cdef291a15ffcf9182f460687dd421cc83832cf5ad03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...