MAL-2025-175489 Malicious code in keke-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faa0f31692af7ac442eb0b517edf370ff7d922990c864407a390ac8e725d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178320 Malicious code in riya-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b7ab2ab3327e23130035c33700b9f9e789e1bf3f4021a4f2538bdca5ee306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173617 Malicious code in butanaih-afusfafi-dauafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c784cb1d138a1d5eb913ef413ab484c88b32f249d95a5219c3ca89af7b5432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175508 Malicious code in kiki-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18ddf4b0521b416a0470692eb2040f6df1c2f4020fd7de7b63f9135c27d27e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178565 Malicious code in sahufarf-satidafa-fariraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4642ef5d9cf0f0c6f0c5bd66298b8259aeafe105a3c4f2b59a5fc9f3fac65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-oagafgafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b803c53b112a69908a5b0fd7026d6934cfc9d4005e5968ad5ea2db41278ceec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178045 Malicious code in polymer-idasi-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6156463ea395ee535ce4d1206646f4ed6d3cea2e0227eb19f2cc77e4a4156a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174201 Malicious code in godi-tuua-in08 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7fa4fa60e621fa7985104ff3eeb499d84489ada04d2e26a46a568896cca87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177335 Malicious code in poglymer-ogih-gaghuagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805aa049cef04fe54ffc9fa48e22d0f9af2ee87dab84ebcce3b9dd5180274828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177533 Malicious code in poglymer-ogngh-agaiahgian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0223a1a0003e1ea0f09f476b46a7f8cfe9da643acac9a7a5db560c8442dd5b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175874 Malicious code in lia-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1d6119a73d2a30812337a5e563408ca1e635690923e87910597b98331229f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173193 Malicious code in buis-masi-butan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b560155a786406415f94fedefafd01e00edcdb81ae3c49837732ba46ad724bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178626 Malicious code in savion-goodmin-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87d0511595b244c6c2f9aa2f1e8a8b0d14ec6cc8df2d6646428d42f2cce45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174429 Malicious code in goodai-sunabi-cufgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffee8f13020108d790bbb63b323d515ad7f4370260058cd132ff8ba15f5cb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174587 Malicious code in haritono-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb218e8431edf270a16ec3db82db531fa594659a5daadf677e8643e795577932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176658 Malicious code in nuilva-bava-muabvavdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ab7c94f70c09c8bdfa92133026ff85014e1e8ac6e415b2e649ea4f5c6d29a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179079 Malicious code in thambi-ref-vert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622076df3587fa9761844964ffe840af761751ed1e74e7bbef4f4f243fe56b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175762 Malicious code in kupaio-kullaa-jiaajouaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec05b7aa85573ee6bb2afb4ce4f8416e531a2a375114902941621562346a5f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173444 Malicious code in buta-fipoa-iufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d87ccbf6b216d3170d049f96e7b600eb6fc6751071f59b38a31a12f596e796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176522 Malicious code in nokire-tanjiro35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bfdcd65d9f72677702041312e142fe8de525a141c95179fcfd969b114a4bb45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...