MAL-2025-174712 Malicious code in hitachi-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a991f1e51d7d1016d81ae1d45ab4a0ce6b117afef8f48e1300a1e6a2af81bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178040 Malicious code in polymer-id-doraemaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca160ab76f861b130ac90f92421f7718777d9ab41c80d66223373ee3860b4976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177763 Malicious code in polymer-agiha-agah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3850bb81a886d4da6951917fa30a4ab107d2851263d3882d6121f27cd6d6fea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175364 Malicious code in kapvino-soi-favavrai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be04cf8cd4b759f2df1c0474491b824057c91c54154df0f5d2c55c35a2277f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175698 Malicious code in kupaio-kia-jakaooai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679687cf56b2b1bf4ada0e3a8606b951fd4b6ce25dbc79afd47661ed44e38c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176913 Malicious code in nurai-sutaf-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3636e7e220de4258cc7b31562a32b2e21428c5327aee19fc1f62e79f06019c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178228 Malicious code in rindaman-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b274ca416c42c94d4cb3ea20309db9a26150e01b0043e592990adf4b043eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173316 Malicious code in buta-faag-saigagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5f1d9d4b108883d865399a111e23c016ed9ed67801ab06956d8e7cd8eebb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176947 Malicious code in nuramai-sutaf-dafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91173566964209c2ce087c7a1c4652f5e0989ceba9bd060240934a0b3ba2818b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178507 Malicious code in sahuar-satidaf-fagub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44958e3dd2863021c62d53b7d8ff7050223475bd1e2baa27f39efb160645b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-vusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8087075390bedbee654c5121f2239308b4224955df98289952446bc4cd5469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f641bb8f73128c2dfd9f035cf57e0385f1bab539570d5b2fb5d6e98dfd86cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-sangunu-nutagfaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110d79deed59a9dc4e2bb5a73df03d272ed7c22caac1484db91d2da965562891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somdu-idabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284020fa298046e6576c4856cc08ac2140effebfea8457c5110e67519ffea4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-imia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f81a0f5fa8cb7244e20e253bc9ab3e9675e23ab36e7321437ea44532c6c957d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugabuai-iumaivacifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27e48d81bdaa33fa37bf78ce3a9944e992946ebe030f1621cf0d187993ae715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-favvri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518dd53f242cfbd0edbb2b6e7e3b28cc1241e73022af2aa53fa6a1d32f1ea1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3318ba29987a3bfe8a5fbdea526b258f6afacba04a5418a3f1f24a0b9bab4b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somagogamoi-faagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab1ba177816f60a241d62d3c06d8d486a2676406139786dc454d99e5ece005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiauta-nutuyaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a1dc7a6f6603c5e67e9765d7f13751f59f801c3df6cc8dd6c962ed895a14ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...