MAL-2025-175552 Malicious code in koko-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a18b323e376365dfe492ae79e945d46703be48b0abf3ffed46722e2a120daad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179053 Malicious code in thambi-cvea-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae747f609fa2eb96f53301e5425297f22f12c4f3259914567afb5488b634653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175066 Malicious code in kapino-samnvu-ubdvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c21076ad4c27688642fe83007e287a3b6e9eeeb10aeb05e47a6ed9674eb2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174818 Malicious code in hunim-satsgf-anin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ddad79f335dae3736238fcc609b723da083f12ab64c8f18d141ee2be2ab83a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175915 Malicious code in mahiu-stu-gaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc321993179ad37827ac7a2a0ab6447c0b80bf26ffed41fc386952121f5a2bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173057 Malicious code in annneh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1766a954fae5723d94fc5416a3a8848e8abc1c5275bc03cc607e1787d97fe0bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176259 Malicious code in namacida-minuday-narutipafad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3933c0d32869587460ab5df052a11bd47c3109ed1f7449d47be6e9a6b517c37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174154 Malicious code in godi-tua-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c558fb735dd5c78cfc29a6d2db816e9b6b5a9570026ce35b7a44135346cc7585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-odgafadaggagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e94b80d94fb45459ca04f5571bfe187cf68f9442143cbd8f571a8c8e53dc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanah-fipmofha-hfuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e227b2f360486795659b1512edb033f5bfe7ab248e096ba4e4f3d1aef99fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-teasd-trer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8a1a00a96f455aa4d33aea62a1fd1f3e12edba75c93eec981cf0d3ec7c3349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tufabm-dibat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e980c8dc7a879ef7feb007e1f498fe8d2edc90d11ff69aa62dd13e2163f9773b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tutabi-ivbgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214472c5bd4b1374d5db44bc8b37dd2309beb3deec57d36108f2b68fe9f8a9f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabi-cufgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffee8f13020108d790bbb63b323d515ad7f4370260058cd132ff8ba15f5cb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-anga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240897e6bdc4d665ee24db9e43be910b027af15f7d4fef70b7c2ed2965372906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055212361d7434b48e16a99107cb5990a40d5cf34d345ae7f533f55b6a09c01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifagaffaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65d2c6aca7c37ad7d1b5f9999b3358cc62a7fc8c388116e24c47accc7b8b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nui-gib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35407aa54e601e5927e46f90cd64cd7f3c09f1d9ed36d2957ba8598b120aac94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufanif-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecad32ec7051dd4e420484aacf07e23ee54163cdab4b6b32b35b27ced381892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-famaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e9eda6b5410d677b997cf7ddacba4152556329e848059e6a1ed8d02bb4d6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...