MAL-2025-175194 Malicious code in kapvino-socnvi-bobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb06edbab7d7a761db984d3cd82eb8a0ee6c55ad1c6b36e47753bad5c3542b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174335 Malicious code in goodafin-nui-gibafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cf091520d293d482273dc03d8ad9303072ba4a5f24c23f72f77c5cf321c18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6d5f4779e81ebf8b19629325b4ed85398c5ec3504a5b908fc1e65f962fe0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175511 Malicious code in kiki-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00765f7ab2724112153382b8ba4dac20c399ffba852c90d1be4f63aea50c9815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad158cabf8ffc36d579dc76eddbd6544bfac68718867ee2e5d60eed59a5d54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176573 Malicious code in nuilva-avim-rusiva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc2da5ba8593e907cd412f4e31f58db5fad0a2c6981bf5d5eec6277da69eb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9fed38df503030261b51a536032acfa3392c358ac29c08936c1a3f0bc0c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fed384f1319838c815d9ff0bb0dae22baccf9c31121d49b3141358a8e0ec7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avaim-rasiian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810bb22a3585f9efff4bd077d497271517961b3e7ebc3d409ee096aad47b33bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutu-gavafiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48796f5bd6ae83bd645f575d40f20abf33a285c565ce5d80acb900d36d82e857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed858b064cecaba317074d11882b1b22a7a9612ac5f64b094056db593af10f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-meme-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed9bbe06fda5b87c198d25165e38422f8e129dc119cb9568377b8c50ce6ca87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174652 Malicious code in hitachi-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dbb33b04756b74cfdade67a16012d7048bd6ceb1c19892c7efe298ce0ac085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiua-nui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2d3d90438f5401f9aa731a3653bba8f12e6238f0179370241dcce318d36fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178497 Malicious code in sahuar-satia-faguao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f72c777b4776325d93f80493965eae4ed4d203d182169cb2679d60488078db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175343 Malicious code in kapvino-sogdai-odgafaaggagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa485e5a21390cfdc5b2443721ee3e0124c36b8a7472beb0bfb5ada10349b3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tumva-diadb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2083c51aeaa16dfb6211ea0ffaa4ee4e5c3bafb2e6b7031ef6f60e9b59f28851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176440 Malicious code in nokire-nakao47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94fbc60edede7da9f08bccc376654c5396cb253bf5a9cd369ba34f80c6fcb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-setya-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47464ea16576968568b1ea889845e571752b23bb8018bc20751dd6551f250c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hopud-mavida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0073100a42c5f983c7ff04251ce683d01e21a666e27df7dacfa7de05e4d4c907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...