MAL-2025-174650 Malicious code in hitachi-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2af4a04fb8186b1ca01b2e13726b82de5e4335c7726f4137499d6c9f560466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173111 Malicious code in btuis-suinana-vimva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa7b0015d8134787863e4102c9771bd58eed502d0b107c96c194e41646df640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176797 Malicious code in nuilva-darde-alif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd79da6d8a2fb9d762563b686dd3fed4502f24f3797a058c133eff33a912e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173512 Malicious code in butah-asfui-daauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8336b4e48823a27153e9ca371749d188992896ce8e28cf0d446a706252559688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178170 Malicious code in rindaman-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4db8cde3c7c9ed27997d6ce491a1d00e13863e6d9e8b0f3e909ff7a4c898ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-jokosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c50c9631c4da1ab18c750eaedcee0be6a2e82299dd1b98f3f4d56f653c0e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafgsjffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbcbb5735505c001f0e4c8894d166552efac4b41d2ddc22633202f78d26f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimiabai-satihb-naib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61d60fcec7e99e67b4a896dae241594b2eefe3316cf0ab87f4ea1caf8c871e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aavof-afafvbgdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1c04fd28b40db36732c09ba36509259bd5f4c2ebe38e7a2db2f95ca6023845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-troe-treu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c0bbb2a4731602c63c1e0fb3da63ece7c438a18c1d0e405d595b6e04757873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amair-tabigafifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3e4f5f35a0ac2c3297aff0d79cb929b51fae4cc308977beb90e923fc139d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8868f64af406794bee17dc8462da1ceb94f4ae8d4c2d9a4df9fbfff9ea95e22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45aa9522a6b67d814d48d92af16282f64181dbd20873db7e96a74e6c812ca169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-radat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8c866265dcf3d1ba48879ad244df3154afff2e835f95f4be997a019917ac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tehh-trded (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593ac8b69e8c880a589055cdf56694d050f7420a362138fcb4c7d989b39288c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satafi-anjigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b3772e7d1260d0e6b6f7f2818f34d201e92c6ef480a3c6f1747237c3828b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kilotaa-ailolioia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19043931f21681be57f35065540f68f045aa5803c19be2efb0ac9213545b6b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fadsg-fagvguaganda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2991aeb64975bfd24825935d34c2a24cc8f4551eff742f18eb7c2988cf7c2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokiloua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adb433fe17da21678a7aed11a101e9280d4b0ad0c876859c977684619fe00de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bdd4c17e350af42e23de565eba924f4928c4e24640dc4e6e329e8394314132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...