MAL-2025-175507 Malicious code in kiki-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510d97affc75a2ef4b70b8ae366ac55482189f769aca9f92475e807198f3a463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178182 Malicious code in rindaman-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd79d57612ee6b358eecdb1bbd391dd9c40e42960af69caa078d892b50effbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177861 Malicious code in polymer-avof-ahao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd96b39fc6ffbf803a105f58fc4e2816b5ea97b3e39ae5e3ef956a9887f19de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178074 Malicious code in polymer-init-tesas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7234d4995ba75f1a5aed970bf54883653fa83934fa7262102376d3235de4e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179051 Malicious code in thambi-bytss-yudt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060ed6123b332e95e4cc68416aa8fe12e5258e6732ced26366488fbb94f38537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174896 Malicious code in iasahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29f46ef6bbb1be6e2f8b85c80e72a09c58fd1fc49227128e175987fde79ee21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178317 Malicious code in riya-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cd7b622e53299618726bbb7711e4f062036006ec0f60a42aad6cefc6fed04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177825 Malicious code in polymer-avoafifa-abohoahdfadma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e8214d0889092d8b46662cd7760efa030eb37af2f94686226839d0582c994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176577 Malicious code in nuilva-avim-rusivntinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b513069ae3418cdfad0cafdf40c019e2ee25590f125a695adfc8c30463cc77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fiuaoofoana-infa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0588c23773c9c2ab794ceb916ce2410be2acf7a9b7079d9de961b499328bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fana-sadofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074bb0fe743414d08d7d9e6605a846e576c930bd565f47ee356d21e71c5422ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufarf-satidaf-fai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e976592151e363368b9db575ef75cf9b0fd68805ba864477fbba898e21640a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusafasdagan-nasduat-bais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d09fdde4f85a1c616154a03bda7f1916abfe0ff8236ce1baf3ef121088b5afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutyu-waegsur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85d3f6da13698e28827d39578754d0cbb56b54747b882d9a73e86e0c3630d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-ggfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e40222bfd8d8413b0ac826a20df914c84bddd347df8c0f94ad8f9bf5112c912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba73bce38fe4639ef365740dac4edb3b6594c59b0ae09614368c64432051424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86af7d383b6e44dba730a9bcee571a4efb12e05d0cafaaa8a5bb3844484840ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f155e886e9ebee4ef7bb89e87f16af877871e78127317bea0f6d26cf8bff9039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-pajifasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10595eb04ca33228a4e29029c14f6ebb18e098608a8b91f749bbeac38ee515b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...