MAL-2025-175045 Malicious code in kaka-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267028f45697198f1ecd1a1b834d86968e4e543ded6229bb11a080b9864e4184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178203 Malicious code in rindaman-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad1c4b8baaff722459e46eeae10919cf26a07b4a54652f6c46b0b93aedb5628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-anjifangaaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884c86f975a82d92dc9004cb72c7ef864e09d796f55cef10bc3e089ad31f459a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe7691a954a6558a962417b8a1af03a371b0ed459df096ae772d2e46af9b8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-meme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43d9935245f206c90eb35401a9a08afc2501981237ee1d0f000d5b574dc94b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jooee-banut-imubuabir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec25f4284a95ab8bf03c130a8b006cf5f1deb8bb24b839ba4286ada9b39f117b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178924 Malicious code in teagod-nalika7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d8bc53d8e124ec5cc4802ceb95c8d4db2a4fd295f5361df1c923689ad664b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175047 Malicious code in kaka-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9baab27f7754e1e25f9ca4ac4d5f4c28157645ef7a769b7f84dfeff01f45de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174291 Malicious code in goodaan-ngafsa-nfuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2819493aa637019e8e8a5cc4400c443930d3a0f13320ecfcfa53f2e512fded7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab94f28224fbc1fe2bc06c3cd73ba7ceacf6213d21dc2d0cd37adc4538dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8b5f0f14141df8a4dea108cfe76764b38654a4810461ffb48888861dc041a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-refifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73acfb0801348c8900e83f19cc98ffbe6e96d50482b4cf5ac981696c735bb62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fagubaiago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb99ceae30e6f97fec6f8fb0a7111c4fcc1a08ee3e35126dfcee2b7350a658a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mumadadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fda4dceced5f391a50730feb564f2ad63a7f2342f6b932e4663b2b38e0de23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674e2a206b0136a27d892198584cbf4c1e95997b49bb05c57428bb0cc1697bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanifavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fedbb5d5c662b341e43b1be0ccf84e11fcdb8c41f0910a23769949ce3e5651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78212ecf061c6e73975fd6f9ff4c16ca7b12e21de8c62801eadd131ba4f79b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937e3ff9957fb5852e55968e8b59133e06018b8913d1b3de07076fcb01dc1ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ecf8479ba6ebc99fb95fbccb257332c8037ed68c0ea28ee3f41ce76f0264b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...