MAL-2025-172773 Malicious code in alvino-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5706e90317b82930734016969e099b6a9f008aea0ee927b6722120f1fef47df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178272 Malicious code in rintono-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f48e21d2a69aed23d5bbef62120a4235aa80ac163cecce988835c405eecf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173860 Malicious code in diva-banbfo-imuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0568b6bad1e90dbba6e0972cddc6e9828cc47fd5928d7637d2f8db9c321d6be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175848 Malicious code in lia-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf15627cc4e0104cfaba6d230b459964338552ee37d56283194904ad3cbfd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175363 Malicious code in kapvino-soi-favavai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e52e8d43b387200502da815364f51760381d9ddb445b4631b46b23050406dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fvpvavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656978cd0c2794d12b4dfcd69623fab2f47137669859ec9ca249abc282dfdb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngafsa-nafuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05d37e73c5a2a7863f6f9f091f7802dba78392704aa0fc0bd7e669a73d7214b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oggh-aghgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88fcc22fbebc31741497dfdc21ec6680c3ffd164f8562bf1eca7e5a0910370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaopoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88c37dab832e53b38b27d051b082aefa8e883fe7eb47536c63258e7a66b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-satgb-naigubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce34145344df432a76c3c5dd014319c6ab1c04cca29e566d57e61f9f61284813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satiaf-favur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dea51db246cb100a76ce5e59eb5c830ffcdd280b93634273edf10ad5887e0a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaihha-aftfsafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284815cce4028f3a014bf457e4048250b6f68c436224e8b97747ec41260e2b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boina-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca9564dd9849dcdc1a09d116a31e9f235f6c71ad5cf97ee811b54271993d0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fina-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865b1b3a15f1a2766f70c68eb588fe2f380dc44449f774a3fd11525fdb48f429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179092 Malicious code in thambi-tersx-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1511c258831e903be962936a1e59d1f644317334d3980d49a77318013e747e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174386 Malicious code in goodafin-nuiyg-gibafgitfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f3d9f59b523b0f969b0dd435b47aae44abcda0bfdfbcd059fb9afe2e23a33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177761 Malicious code in polymer-agiha-afyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba74381d5b42eb10dfbfe8959a52003f5e30af789c4c6bae81ece041b13d905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173578 Malicious code in butanah-fipmgaofha-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f04b7205dbfb00fd548be846f884623a4231064da4190753e335aa86bcd924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174398 Malicious code in goodafiun-t-gif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e10fb74b6145c5e3c40c33cf4a4db7d66ca662d1d835b591dabd415f83ca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173633 Malicious code in butanaih-asafui-datajuhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ef6abf85c8ead870cbe6e6df740f76759efde7afb9c7bf9b0058afa1734048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...