MAL-2025-174656 Malicious code in hitachi-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c5df16b2ac72ab61be7f08a73dc057a8d3c8a039403600d8f4a3a1517cad67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172751 Malicious code in akkkkke-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697a4c67abd318b39a41e391f0a5ec1ffcf92e2ed9dd76115fd294e1a22ca9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174365 Malicious code in goodafin-nuiya-gifaauu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600bdf67d7e0f1592ceba7f9ded9c2baa7729bd5daf243cd97204e8a8c762301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-faf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0832d0f6d807f52c254960f31f563868df4c0d96d9b5e79391e4a2a90bfd1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dufgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0001d0f1532afc6c9835f18eb8e47e9038fc91f4f98ed4ba5a53efbe0cecba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15ebcb30fb7955e68a075d1789a11b93db04ef9e6b4e3d5806059f29e3f5bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179250 Malicious code in tray-upozp-namaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef19986e962687174a52b80663cd1460794afcb70235a9f3e6c9b71d39b5465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173155 Malicious code in buis-manais-miopagfafiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff721e622d9670ca52d5ea564f4f49d6bb062882a063008afd1970e3b20b110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178703 Malicious code in sugoodaini-ngasa-abi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6c5fe10164b619a819ad125737fbc9768d7840f6f8c4d822869c7190bb2457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177668 Malicious code in polymer-afavhof-rafgabavzfgbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea53ef28b9a672988d202d9f7288d12614b2be6d65dab27abf610940ec84d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174497 Malicious code in goodain-sanvgaunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc13308354d7faf3d500b9aa87400815167aad134bb0e4466005c2b5c29dfa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176141 Malicious code in miusafadn-faafud-anaeraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bab82a48ebe07559015ac31b6f4ce6a9d794ed8bee6d55084155e0661d2419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174143 Malicious code in godi-tua-in08fdrtfdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f41e1c59d8b488644bd1db6911fc323c180d6821a2b3aa0e5134db2172c78fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175178 Malicious code in kapvino-socni-fuvavihaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5acf1aa0cc5bb1613086028b011b4cb4a450b059d54b5d81f67f278c9a56cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafiun-t-gif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e10fb74b6145c5e3c40c33cf4a4db7d66ca662d1d835b591dabd415f83ca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178840 Malicious code in tauhur-sofi-ditoay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d4ea1d275053ce457e26227430771db7426a43b803aa25d78ccbab4d2c2f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173662 Malicious code in butanaih-asfi-davatihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efadb49a00945d66746c642cb13341c7e62065015864bf3ac068b75d3f27292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176613 Malicious code in nuilva-avmiam-rv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf18f146841202d549593d2f5d98eb5704340751be45451f7840fb3ee971196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174259 Malicious code in godiu-tumva-diblu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1f9f40d913638bd29b8c503c73cf5fd6cce89db2290ef62e1d0fad35a4af93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178904 Malicious code in teagod-naiman20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d174fad9da1276437d6710d843eddc44639960105b11d59e94e96dccb29a3323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...