MAL-2025-178711 Malicious code in sumpel-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c245b66c9a8cecb0e2fb7b5add1a91ad13fad0d5544d014c3809ba5915611a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172727 Malicious code in afiasahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df85738a25746e61d895edfb06dd564f5e3ae79e5312d375fe41c31bd5343bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174638 Malicious code in hitachi-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ebce0be6e61c392b3a086ce837c4efc85f875a8d0020c21611f385d26e98f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178762 Malicious code in tanuauir-sofai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fab935c06c2f6823a6aa9bc2a3c39663d1b85e3f921e92d6991071959497957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177550 Malicious code in polymer-aafsia-gifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227af3aa6b399a01017f7c1ddba5b8e9a76f6a3dd58fc0b700d9c34781041d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175414 Malicious code in kapvino-soni-favvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ffa64c64f67c3a99f1b6c6d7729b635e6c377c843c03a318f3d34f8bc43d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jiaklai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa45a4dfacd838fc2cd702cbd0da59a467611a847bf011fd285ebc11b4fcfcca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sgoodaini-sanugsa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97178a603cff6ba5fcadda0967e342c991efdf2a12cfb696557d813682c32e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nura-suif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc086a5fb643ae4a404b8c64f92f5d07b9e15930167428b25480778b2196646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bonvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0966d47c80759182b867f75475116ccf0d9bf4a0fb3c0867966c43e6f298e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-oagaffgafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec35639250b58fe8cb75e5db2e69ea1447934dd550f9269ddb23b3e5b5bf5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubiyem-buyt-butui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bbe7a491ca55d5a7a003b91905bd92e1bc4fa24f7dd1e8cf3210fc8803105d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-baya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9b83b070b9fb9344aead823b515ff248326ab4395ad8f758503bbcbce73264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f793425defad668fca7a63d1abb9b7e84d8ab298047d42d3b19e1ec834fce53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-baf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c22f64ded383065623310d4f3e4d02c36e2e5479f7b3c6f2c5684b9c36cbae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodaadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ce8056cd73af5004dfeb2d7c4a248f75f744bb5db5ae922164df181270fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agiagaiha-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a86fe4dabdaaa8f16397b80c575294e21c824d648131f4e8bb219469055375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-nuatapata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e638b66fdbf35d69272f2fa86e34a6a19ad731c6fbc8505deaf6d6257aae7e29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liabokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c509b048fc421d113fed5162bd35c90f4c9e9a7da65fe4e2aa67e4c98527d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adudar-baidya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e863109533eb415457d05ae933b9a4a2ecc17c7d258087f6486cdd615b279efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...