MAL-2025-179405 Malicious code in zaskia-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55814364a30d90f33ef6b22d7b30af31fa5ecd22833671837fa8573679c26dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173405 Malicious code in buta-fbobna-giodaaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843308a7a27d23bcfa8bb616b47bb2620c0a91aea91d82ee6cbc634b78f16a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176325 Malicious code in nokire-kaguya6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c778c84d3fa089c3ab50bd74d604a89f64307acfd19cf868a94a8e2211204aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175503 Malicious code in kiki-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631834580551eec606213693547546cf73c3db49000153aa61e456621a966707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176617 Malicious code in nuilva-avmim-ravosovia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d831d564a3726be0218d768cba30dd69cda3c283ddf6d4743f8f5f7cc8121d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173978 Malicious code in diva-tugafai-imagivaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57f16598f2ea83db7e34ad5d69aaa5e9850f829a058c4b5b6dbf9ff767deee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176097 Malicious code in miftah-mipta3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa553cd904f2bb6c66b099de045bccc6644243badc83e308c73fc374fa609cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175743 Malicious code in kupaio-kulaa-jokiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d561279910adf45252e4b5256e91168fbae024794936d9b3931edaa70e5d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176282 Malicious code in namada-kangasa0-nuvayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61a311cee20b2e147cd7b4332c4891ace890aa63cc81516a9dad4ca9cd4da35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177514 Malicious code in poglymer-ognbamoah-agvsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f128fb28785698c8427fe9c172333999324d56290342b27758f7ce80e125d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb8fafe40bb8f3b232e6073751ab66b953657f9dc5972b49680110fe8313b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-rs3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c145c8858cba27fa5fd0ee83cab8be6f8f9bd60fe5079b1a294556bbf3cc0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2140051e0f5074c3c46ae4cc2bdf7054401c3f86436df605331b8a66a3bf5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-buyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b54e2c5335d28ff873ef64194f8795881d4d3e268bb9a6bb97a8c04b22021da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tug-iviobga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f51239aecb8a81b4a5e5a83aae21145d6f31beab3a49921df3b85010fdb8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-addar-baidayat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b2fa16e25fefd779cb02379d4534560163add22645ee79ecb57af8a75efe2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-fuvdavaibopva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c64af8240e2e15d1c3c758573b58efacb4c0cd16aa034013b1ba289bc7b190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56945736bd9908538eac2c8bc0a62b29f7e6a26d67b727df92a15f84d9b05285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-rasdfa-vs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa43b4c6a2653ab2af27d8ea855c30e2f06f41277f915ecfa5538da507e5136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-favcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ecf8479ba6ebc99fb95fbccb257332c8037ed68c0ea28ee3f41ce76f0264b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...