MAL-2025-172796 Malicious code in alvino-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6935b7b43a0ac0918b83c2a0fd29c8650bfcfdffb9f87300d4b767fc5e4bb4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175635 Malicious code in ksai-kiloa-ailolioia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a443d41aa1a0d8f02b1ec88acbabf468cc2f8d664a3b65cd4e1a506b57a239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177032 Malicious code in nuyar-adamair-taqaibog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a999999e2e267bf096d75894926482fcac28705259bfaf3fb73c5ce3889e574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175999 Malicious code in miands-minst-vasusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1922a44a7419411dd1be8390253841173b8ea670e0ad72c18dd2de43a6d6480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traay-patri-paans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d27652ed5ac1a3d5d48133b579cfa172d34f132c34999e07d268ff5f0e3d42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avgof-adafgadfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18989edbdea77929e37b77bba5de35fa17bb0038a937b0519484a38647519dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844b5f666641fcb7ed1b2ea33ca38e07cdc4b47decb13da81bf0a6f91643c237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gagffiggaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e9cd7e1b2e5a3e30e4b65a361af990075794ced9cb31395854f8b94270a635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defb12384bd8f44458a46e28d0ee1bdbaa1f209ee7c26e4698f5383f8c77bd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mibaa-minfas-msidnsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525a3e5c6603596a6d2994b601f649da1047b71e47874726f7463cda2faedf64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sffoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce46cfacbeb8c27973dc3662b340e245f635a027eebd30452de67dfe6a401a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ko-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tabg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203fa3df2200f69a962dea028f08c7a744109eeb9fec4121439d96dbedbce748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-gaifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb46ea62cadf53033514053c49ca9a192a41444409e33cc145e674194e48f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4133c9df6e14d6c9dab9979f03b9fa0f8408b9813572cb44ccff84a2698602d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-darafaoanusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4c1a7a21e7deb7824106d240d4bb9e792738506b47fa6a07c58612408baf8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178626 Malicious code in savion-goodmin-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87d0511595b244c6c2f9aa2f1e8a8b0d14ec6cc8df2d6646428d42f2cce45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176713 Malicious code in nuilva-bavia-munvidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed78a404587188520b833cbbf1a2464147db9f10e37f25b777d186d1bd9cffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174687 Malicious code in hitachi-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c744a2d4697682871bb0ea6d5bcaacf76635e521852bd2a29e7f0a456a179ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174620 Malicious code in hitachi-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...