MAL-2025-175334 Malicious code in kapvino-sofgdi-ugaffaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ee9613fd05f60040a352769e9567dbefa2486100fc0c2e635bd82137acb1d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173424 Malicious code in buta-fiona-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f62002f395ff3aed799fcbdda1a49ca9a1dfb660fd3faed3e8c42d55b08a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177488 Malicious code in poglymer-ognagh-amifagan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b71bd7e36522ecc6896224eda96ee8f2f0228f1195c4ad82cf3c7c368ecd273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177017 Malicious code in nuyar-adadar-biut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46da4a45cf0d1cefa24168e55d21eaae8648f8470d631280b7b7afaa334b23f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177359 Malicious code in poglymer-ogihh-agsigagsfifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858d85dd7ed6a6898a0a5c22a495196de10757ed63662a9d3af074f77da8f84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176866 Malicious code in nuilva-vmiam-rafsbsua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de09c4d81d3bc036a588fe55c112b9374482a09da46366e314f253968ee65bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173265 Malicious code in buis-sunina-mubanavba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8e86e3fc9d1628f64170c0cd8c8746e389f6bf26ce77f273578a8d158c75a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176998 Malicious code in nuur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e841cd0d49956e50b7d65336ebad1ba69aff7921dea92d21ded61fdb4bbb121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175996 Malicious code in miands-massage-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcfacb325d25d05d8c6f3c77d4a7d801e7db9b993bbf8841d407d4f807eb3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177928 Malicious code in polymer-datsid-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94dabe2472312d9fb060bc8109910d184a70584370873b1ec241321c549462e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butaahu-asfui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9614fad06c2978226a1f73421a9dfe0e7d91280fe51428d1bec42bed81cfca3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d9d881b9cd1513ed0116ab1e3e7ba9f520b7aae9fd903d99be56ec072c979d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gafaiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39f10808d97961206140fe45a6818ad3966a1f962d8a82aaba567f6c2d1882d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidafa-farirtaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91417af516accec3f0947cd539e35b11ffc078f57c50c8e2b027f9d47f94b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faag-fnfdaosgsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253575088847e3c3af4964f9ef88c341de0b2e32473453cc8d16ff5b5e6d307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-uozp-namaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57af9316101b3619d47350cd5ca5a4aaf0850e13b3b9c2ab9df016322517f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e51fb45d8775fb7ffa66a1ad496d0d29ede555433722faf2b8b7f7214553bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f51239aecb8a81b4a5e5a83aae21145d6f31beab3a49921df3b85010fdb8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimunaf-safiagiaf-cuagaifagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eab3b8dea9bcc32bebc8afa3d5ce97ca73b75e75ff9c20d7bb3209527fc5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-fidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e29cc7d941074c4b0607873ca6abbed4f1e6c62396c6410608565e7207f243c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...