MAL-2025-178203 Malicious code in rindaman-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad1c4b8baaff722459e46eeae10919cf26a07b4a54652f6c46b0b93aedb5628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-anjifangaaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884c86f975a82d92dc9004cb72c7ef864e09d796f55cef10bc3e089ad31f459a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe7691a954a6558a962417b8a1af03a371b0ed459df096ae772d2e46af9b8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kim-jiwon-meme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43d9935245f206c90eb35401a9a08afc2501981237ee1d0f000d5b574dc94b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1da52e4994b4ebc42960716455dfd3a84ee60e1ad05b2901b2c228f4ee7dc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jooee-banut-imubuabir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec25f4284a95ab8bf03c130a8b006cf5f1deb8bb24b839ba4286ada9b39f117b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178924 Malicious code in teagod-nalika7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d8bc53d8e124ec5cc4802ceb95c8d4db2a4fd295f5361df1c923689ad664b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175047 Malicious code in kaka-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9baab27f7754e1e25f9ca4ac4d5f4c28157645ef7a769b7f84dfeff01f45de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173779 Malicious code in butry-toi-muayt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b31577cbdee6b46a48230a4c3773f279f483d81f8d3039580c47e7e48e2186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174291 Malicious code in goodaan-ngafsa-nfuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2819493aa637019e8e8a5cc4400c443930d3a0f13320ecfcfa53f2e512fded7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuuur-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05673a8df673bb19d5454826b918db1b16efc542fa2caaf8a45162219406c63d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab94f28224fbc1fe2bc06c3cd73ba7ceacf6213d21dc2d0cd37adc4538dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453f5ffbb496bb9cbf2d6635753a60ea7cb41c3c6776ce2989bdc79e32c0512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanufahuir-sofai-dugufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8b5f0f14141df8a4dea108cfe76764b38654a4810461ffb48888861dc041a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-refifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73acfb0801348c8900e83f19cc98ffbe6e96d50482b4cf5ac981696c735bb62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afavof-rzfbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09493e5f86289cb09c16f31cca09c380c1da03df311bdc7eb8d79428db2115b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fagubaiago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb99ceae30e6f97fec6f8fb0a7111c4fcc1a08ee3e35126dfcee2b7350a658a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mumadadabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fda4dceced5f391a50730feb564f2ad63a7f2342f6b932e4663b2b38e0de23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satib-nbib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674e2a206b0136a27d892198584cbf4c1e95997b49bb05c57428bb0cc1697bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2713430008adb83334120c3583238c076e52c3458453f7afd39c69c49348f56d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...