MAL-2025-175556 Malicious code in koko-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db7e98b9bfe05120e242f05a6f2504c00f2707eb6de9cfd60434aa8f37e9940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-miopagfafiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff721e622d9670ca52d5ea564f4f49d6bb062882a063008afd1970e3b20b110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-mubn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9105f78d0ad9d54eeb322cecfb85d5377cde6efd3f48eb4501c9fd2d822b25ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avoafifa-abofdma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7204c02ea20141596e6745990b3a7e10ad389c60c808da682727b459a974ddd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-koaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb6ef72d8fd41ef4b3e4c0b72ab53655d86393856fb898fa5b3d89446dac4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-utudru-uyia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd8fde52ab078ddc24d2fe29f581f018bb720e966157b6fdf8ddf1878469062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-bytss-yuhgd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76736c2738f35dcbdebdb081268bce53e9421575f6e83e68346e4cdf4eb6f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174313 Malicious code in goodaan-nusafa-nfiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cbc14f8682ed0d4e82058cefd22a40af997dab91fe6fa05dff16661b9811129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179290 Malicious code in uimnaf-safif-cuagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed302640f4c0dbaae2ba624d005ff90ca78eca46cb298e956e81dc6ccb19d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177589 Malicious code in polymer-adaoag-agaagisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36e2740f1fbb3b3581562783738b28b7a70af64d9f482d0f45168def01421e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178872 Malicious code in teadod-mipta23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84a0ba0c27eafb01c2f36d87ad5acf45ba90a531c199879dcb99afa01f22157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172704 Malicious code in abtengg-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d7df12a0a477ed56c34e96f63df28a12913a236e366de94e794eaaccd1e7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173094 Malicious code in bafai-sunai-caiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8363689fe3fe66de6c957ec225d86f8dc3f8720b93037d9d78d4fb879d5f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognbamoah-agavofgagsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13775957f947c9823eda96fd223f664f182503484de26777bfa7bd31b9532411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-uyte-berts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1ce9c7512deb0c5733060ed3887391ec33ebebdfa0ae11902dfaffac1dab34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0053ed690fd0db23c2c26ad8cf28d2e9a3244af8f5a1b619c50707554f5e85c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-famabavpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1608b94d75b68aa558da2c6c7d80b5e63ede6541591a2826eff9d69234a9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afusfafi-dauafiaagfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273d71e481cfa0e9d383101c1fd1cc99097f9dc66f8c6d4b4477e744ce380b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avm-rucas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45c12067bba6c9fe62f1c9acb065be5d80ba656b5f9ddc7b60d4a3b01300e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175059 Malicious code in kaka-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a4988c653862590092f1a4c7fdfa5c077808cb031633870148d0fc0116b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...