MAL-2025-175663 Malicious code in kuku-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aea3f0e3c919929ae35c009faea99d04436d30bb30a592387d70b2563b29e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175060 Malicious code in kaka-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc366a9053b709d44b689f1803e6d6531bcb4a0bbea6b6739b0bc5ef9287bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174698 Malicious code in hitachi-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dde271a62d8a0be2a8317a66afecaa89935ca2c878864b6b45f9cc578f2b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuku-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89df4a4c0f884bac52cda110a7e5f5f96812686c8a5b6fe777cbb92280c38c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfia-darufufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20fa60fb6a1b622459e4b6022c27a5100211c222066d5d9498ffa8d5d7fb637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avmiam-ravfonasiabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d382d8a19a51cc612824c13a78cb0452b417415b7fd6121c9f55b1d7d8e6cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176952 Malicious code in nurnua-suif-daganayui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6a1fe5b860e462c67c0e5dbebb857f890c459f6e8540fd0dd538cb283077b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173357 Malicious code in buta-fana-sadfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae75c52dbbc26e50471049156535bd4538c0199887d1eb7bcd8cda22ebc88c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177749 Malicious code in polymer-agiagaihha-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d21a508e48b5ac4325d735f6c693e0bf51c13917ede850d756f745094cf3f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177917 Malicious code in polymer-datdfadsid-raadafadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947b55e4b5cb71dc61d153dac0be67267117d244ae9a365c89af05ad068ff5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179062 Malicious code in thambi-geunsme-vers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba90fff9412bc10ed3795b4dfe7f6f71d8fdea50cf9905589e149a093c179b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abahh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c48418106b8a9aa3c210ea4d81b8eea08b0527f927f1a6f55c9926c2c3e587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimana-satgub-naiguanab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c067235a72a058b7dbbe7d3537d586f348a7806e463c68039f7b6245556a5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vsers-bgtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c42ab10974cf39c2d2b34948447cd3937533971263d12f6bbd30f28e06786c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-miadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e6c5d63a82132e22ae5c6c40a34f4271940b1c8fab3bc61fa431d72b4f430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogihh-gaaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edfb2ca32bb9aa6dd8ccbaad7b03786419eb06d4fd59c0c0bc8e60eae9fc24a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trusi-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f113f53c9ac5ba7de161b13eb66d2b8be92d8551c211d31d1e69183c4dfa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapio-samunu-mvvma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4802c4140b4039d2797145049a43df78b983bac55a0937152136a5162cb6826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee433b88eee606e8bfe5dc692c3522855d2bd85ecd72f5c02453e085a35c83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c822f380ed60615955c7e8f9dc061256207d584089024d0a2a3492e60afd6995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...