MAL-2025-175485 Malicious code in keke-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0548aaf752f114916bfbcf0ee17c8a07810be926e20688f3c520940ebb6086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173832 Malicious code in digo-kaism-lmiaor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6544f7387aa7a4902c57a472c278c991b20bba92b97a25f4da38318c579946cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176517 Malicious code in nokire-tanjiro30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cac06d8612ca64fbec5f7cc01f0264b1b132694fcb6c894a5b2628e9475789f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175362 Malicious code in kapvino-soi-favai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3425395b46a34fdafc1f328309653d5c9cc8f92c9ad4fa852eee43568658c8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-faina-agaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9265548bbd550022f66995309b905d7881b2085669d7bce783754de772b87ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutraa-nutard-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2b2e9b0ba388a1385b18ea4802ba5225c8ddc854bfe82ce136105045a23918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55981ceacbeaec2f05e0a5ed1e4ab28bec5629a5d9599f2332b4a80f717d379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufnif-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e1c744598c4760ce9180ad86dfe3058625cc68b37a20593f8ee4f52571e916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manais-boad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbfc6b5d810c03e817c3a7b8a2727a903e22b6af86b4d9a5589333478dae0fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutry-ipuamt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd304bea5dd326e2a0ff749e19d65f400f6d67ea45da7605494d06984dcb888c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5dc5f1ccbe684d95be7b61c2bc41566a25de1ba7fa2e92734e6c536a77cc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-saffafi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a4af3095be9ac4de73499dfb02c3ae5a0a83cebbd6181c0771523fcf7963be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaaawa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6ab45f229d17a972af19743749c54b1af9fc3b92f70b3607475422d9631cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4559012861ebfd35e1cd77251e4325f12002416536dc8804e14558685d1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kila-jakaiaoaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4438337601bfb4ba8d43e80762fe480d9540a88d662799774769f6e8e241dcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae94bc8026fdffc19364a26b1475c1fc1896d88d8353984b46b7fb78b0bcfe88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-bafagsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5645df06d27acf4dcd9f6d4a6cebfde55ca87705e65ef26553f1e9d6bbeb2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dubut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795237d56472bc0a8c8f21f8a8a98126097cb3ad2304f5db6865ac5ed58f757d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tunabi-ivna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5a171c0bbbb7c7fee721c44c173269abd8ca467bb55699a28b9a567f63e7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-teasd-trer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8a1a00a96f455aa4d33aea62a1fd1f3e12edba75c93eec981cf0d3ec7c3349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...