MAL-2025-175054 Malicious code in kaka-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa091d065736fd5c854607e3dbbb2f3723ad5dd19c45e24f900c8682cbe8dd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178669 Malicious code in sgoodain-saunu-nutiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0931b0cd4652950637002ff9330a169fab793cfa8ebb0d07d77afc5b6a5214de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adutaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef46eed955a014855ae77b91147c14969dc49eb05eb09824cb4b7c803080ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saviostn-rsdegs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07718f40515286220d426da8434c9c3bc0a7ae85353fe248522a031cfcdc4a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kaguya19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab018d7c79499b42322d1212f90da704b9b24d679d3f280f6aa8dd717e786fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-mavav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d26d3a9faf4f7984e738cd24d070992379113d07d12184ab19fca4ac6f5cc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7165cbfb76fcf196276eb72ea0f5796bdd9da041bf8bd103f6c0274710b0a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afmsahu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7898535c649041fee364a773be40c01f642d5424310b9b17f73ba332c5e98aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f05b38e64c6cdebcc247e594fb08cd9e3fd366e6bef34b2c9c4ea7c77ebf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurrr-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63450b9cc15518cb30b81717b6c8fa5a230407c90bbd06e889d397d3287bdc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aneeeeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8a3fb8fe85907c7076f2baa1a1486c213103504369fd1949a43872cd06456b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-muddl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468e8c3265c697d48ed139ce2dd54137c99b4259e10375c411dbc7171a22fd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b274ca416c42c94d4cb3ea20309db9a26150e01b0043e592990adf4b043eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fambvpvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014eb20b4647659e59bb5dd206fd7fb685df1c3d4f5d79773fa90ec1f13f0a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-brdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870a3422c44565054bda1461a5871b05632650ad3e87037c68415ccf367e8ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-utudru-uyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc29e7e797b410307fcb9d7b24622e7c5dd74662c23754d5740d4a2fd80ae0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-tafdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ff2cce3e14a1732fba910068b96b37a412a8b32f00794a4027f7e84151a755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yundisk-reusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414b68193a0986ab5f537db9b7c4e1ac4fc243162ebdb403e5f385158b38d797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-turai-inusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e35ce79c061e2a250766704d1374f78a11f33637744df108885298e915bc9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fbona-gdda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e19e3569e5340ae38d51cbe7a40d43991487dd31b4a436b3f6f357be36eaaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...