MAL-2025-174647 Malicious code in hitachi-poke129 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f9300dd4f1dd326f3471f178e15ae5f5f88e99d91105b8ad41e5714bba3191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174727 Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174446 Malicious code in goodain-nusafaia-nsafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4485c7a870509f21e61d07661df823ac4b4f50a53f40367563a552d97a46dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178048 Malicious code in polymer-idasiffa-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accdee34ab69600aa450a65a541b5480a1c674b45ac8972ee76b58f5db4fb634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176079 Malicious code in miftah-miftah5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6cbc7de5e146bdc46571d8a1eb6b571362574a029eb01bacb34d4c5c31e0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173958 Malicious code in diva-tgbai-imbuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d722be7e0d7f342ec1b1167e7cac272eda1b4ee6ca492a8e077b54e7a0fc9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mubafi-sunai-caigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc495e4acee8a1448fc35d06e6f3f329707507074a05df28afdb44f5071d1fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ae2d911a28ee7be30ef109a56c98ec0c4bffa3cb51a7d055ebcb7ba49a9cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stu-gaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccc912bebc5fad2bffbcf6a62818ef3f997824b3fb761452350ca02749bd324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saviotn-sadfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265812f2ef6a9608ad29c5742e43a03caeb357005e4a21d8ba9e07af065ae252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-temp-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 872a018dd4e76e3cce9e320bc01f6e9c2c771c870316eea0c0c56280dd48364c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapagfiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fc7d14439ce4f929a7fe1686023804e821fb7fedeb5266ce51904fb1bd4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fiana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9c041c9fc1129815dcad90112b45904723d3f7e556010e50aa9986cc4da900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e375a6cc1c691eda756cfaa7bec9ebef227baf4f0ed3034ca791e5983f00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jakalai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2598539b5277bc916a826c0d17016a47f4a22b71f9fd4c2eb7805c6ada20692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosimao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6e410cc710a6731e6408821ebb1bee373011d0ada59be5990681014bdbf227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-rucoovsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf90a8f5944388030c1d3c613ee01956f25ef02fb422983bd3df42c0eb802e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapagffiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c1b83ecea31be3aff29bb7c9123f1e69b83f9349fd6f87546df7c2dc9d5dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad0e89133745ec2f5b00cb9d6546eac7c3122acb031b66b4ee5dcb00c63dc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sof-fidabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e29cc7d941074c4b0607873ca6abbed4f1e6c62396c6410608565e7207f243c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...