MAL-2025-175544 Malicious code in koko-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97e7c5da75c750fa911328ff297593fbf76f7a616e544e9bd4824d6784b9166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175625 Malicious code in ksai-kil-kokaialiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97861d577f11fd6c478ce919ccd412caf0f9118c86b51bb19a14826c58fbb8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe711ff05766227f967152e22232aae9bca5c2c41e66bf190924c25050ab307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3610be3e459ecc1384d23741fbf97ae9eb323d3989b3f235345373bb8a188707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahih-faigaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8cf2822edf1a471b5053386a064df8c9d0557a38ae01375e934aa95e10796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177279 Malicious code in poglymer-oghh-fiffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49ede547620fef7a5e07900efd676e0e66ed0487eae453ae3f8f21b03973b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-must-nirta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae539597e1ab282ac8f716ecdd3607197c46256128adcb027d03497e5f38980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmim-ravosovi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69947ba46c0daad13c9929b1372ed7290889ba2312e448433950988cd9a05e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasiffa-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accdee34ab69600aa450a65a541b5480a1c674b45ac8972ee76b58f5db4fb634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognamoh-afiaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6afb2fa45285e7bca408bc4ca27e352a554d1564579c6d775ecfa75eea2b0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erftads-eredd-versd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6c5e6a7dd410ccb750f9bfbef255a1737f37748c4366fca47dcfbce488fb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-muyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6fbad0904bb5515ab099c3d4d0db3b2f3c6be66d336f064c5339158eb4d5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-maniak-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408efc2a1b63c139c8bf5adb71d303d29dbc475cb91521a50a9f765b9d555fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42aaaf4d009dd3e8dca0e837ddc3de626c4cd4dfe7c295ea1896da9fb413605a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36c599fe418de6716684051d1187650923bade046c85903c7217f80f4338c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-madivunav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b9634db5b9691780b2d188e737ac8164c5988c4835bda7f056fad77a6c6636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imubauar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e791655c8261f9014d9b428adcb3956aa578f9c92f1af56f19aaa3e62841dd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-toi-milpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d4d3503370ed65aa7b7cec29d82dc7801297e7162330ed49e1d7962aecea39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de5ae048294cf56000a4e28c389197a952d8a1df44d83e54b546eb8d6311f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuar-dad-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c56bbc99409f79d4c0a6d3b1201aea8ca85e2e53565ae2e779fa84d1682b24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...