MAL-2025-174705 Malicious code in hitachi-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53b7a6be570044878596dc1ec5b6a7bce979ceb11bbb466242d1cd3a2be4035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178888 Malicious code in teadod-rsi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4c5ee14edafdebacb37993162db31fd547d9c7154063640faddf642cfdff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176446 Malicious code in nokire-nakao7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8a1f0f758408ecb743da75225e2bf6e60eb3b81f97a17cc8613140ff8ff886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah20-miftah3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b4eaf151548bc3a07380ffc9f5a9d924bd8909889d463bfdd2df0035006f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172673 Malicious code in aapa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9815f3ca5bedabbd5de24e373ac986b5e70af52d9c4811500c48282ff2a425d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179107 Malicious code in thambi-verxs-vrfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ebd83a5ed9d1f5a24932c91e819357814dc446b62d420a6cff5e385382cd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tauhur-sofi-diurfay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e747bacfd62d3b7bb949532c3bc75d3f78a05a9f4119c30eb2911c84614f5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fambapvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3d08f1789aaa5d15188ac2e174eee1317f125e6b5117247a9d0b2e984b9813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173192 Malicious code in buis-masi-butamnamb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78133df4ee3af729499450b93eaaade90c0c5cdc0ffb7f3814c23dc608ddb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusaia-nubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8838576410086b307ac22ef09bed811bbab4358c3c76bab98580c7910e04ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-racing2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b8094e5ba133b10858afe5e1c122a4ff2e082d992c443d39c1c75cf159101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-faninufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111d6e013d5ba63e06b4ee150940c2e19d79f81fad7c92ec838eaf404ec62cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-favavrai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be04cf8cd4b759f2df1c0474491b824057c91c54154df0f5d2c55c35a2277f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-freet-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e17bdc4f9d9d1fc3547dd2f80eaabbf35b3e58ced46c059d11a6f09b1029e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8d45324e3481e0aa4d53a74f803da1a4064a51a2269f6a21ab8867b1ca23da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafi-nais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7a6c3e751506678a80aff5d3d1f080e2fb1d18cc5ade0d829d816ed2d05e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-safif-cafguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58eadf5cc030cc3b14627f1566fbe8ea505dfa9ded682e4e61200eb4edc1d0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172918 Malicious code in anidata-hapdits-rasodf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4f3c99d593fa4860d37bdee2a65a77ffa36a61190fdd1c770fd30b7177851e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tresd-dsgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45b707860ba677a9c88b9d0e19e2edc867e266f5fa0f047237c5601737a2b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173827 Malicious code in digo-kaism-liamkiaayianor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1a1a8026bd1dd9d4e52a9011349978a992687a99ad363d3d24f0e367dc0461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...