MAL-2025-175662 Malicious code in kuku-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89df4a4c0f884bac52cda110a7e5f5f96812686c8a5b6fe777cbb92280c38c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173876 Malicious code in diva-banbo-imanumaabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7943c03edb46d636ac1c363ebf072193e3b88ad08ef811a56e712a2e7a51084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bsoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66c31e82cb4d4996b61fb7837307e555ab32197c7ea418dae90afafa92fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annnna-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0acd5a3bd09164db4bbb9c3dccec279d60bbfdcd2aa24d7e43dbba906ea46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-muabaac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da87a4fe02c3a05adb4b38e61ba1faf99064c55e0d8dcc2c17dd54e611d400c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175548 Malicious code in koko-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bd46c11d25c853b8baea11a092b7037039b0f0da2efa84d5adf58a43ceea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-gfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bf24822c59bc525d9f38f79dcd128b5105e46105578d3acea4f3e111a4a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kaisom-olailio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eaf2c3d4a211b3858b2b5c161e81145f1eeb9ba5bc89bf05c3244a7d11a32b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175079 Malicious code in kapino-samunvu-ubdvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcaa8ab31796dfaa9055ae9ad042fea5ece5a88e0cd8f69b586b8eb346aa190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-asifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7abf477403b3b6ff4abe6f2f4dd61ccba9096519de69eeb7ec459f20c084b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiya-gifutia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2def5d2afe760801ee420ade225c3c2d3e6d438db72e7c62b386fea19fc1db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175771 Malicious code in kupaio-ukula-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1759a5372fb0aa937e285a49d349cf8532f0ef12e9608c9fe466ad3877392b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutry-ipsumt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de794db3683a2ca56d036a5d2a2d4cd264f066ffe7dc0c049b40bfe844537c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176667 Malicious code in nuilva-bavaim-madbavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38bef00c6bd6ab362f468fe15a84523787cc2ee6c91297a095ac25a4acc287c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177069 Malicious code in nuyar-adamr-aduta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995625f3b5e314e8b6d0655ee4f9d904ba4111d16fca46d0c9cbe5c768d587d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178435 Malicious code in sahu-satg-fani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052bb62de35f892e455152af35b8ec049e1958039b97c68b9344216664e3f223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175062 Malicious code in kapino-samnvu-ubdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bf3c4020d0ba07b896b78b00d63692adb63588637b8ace39e9c52fe2ffb1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f72a04b11bc7cf842e8c4e6e4dd339cf5651f6610698f15b69ad17bbccf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6995bbab286da92d7b19a3654192e77fcb66cc3ac0c74e6411082008903a66a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-dufaaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec1e7c72192daa4314dfdd788bfe7241f2b8243c934386aea5a9e2bd794533c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...