MAL-2025-175504 Malicious code in kiki-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05221399123bec27827f2896a69223d075bea650a332696dca5caa3e36d88f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178803 Malicious code in tanura-sui-duanafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9165817218ad770c5626329f47d7bb73ae8de74cee25d51b59bbb57b13f2faca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178764 Malicious code in tanufahuir-sofai-dug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2b793630c310e507096cc3b59122b78a6513a16570461447c79c9d3de17bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175382 Malicious code in kapvino-somagogamoi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63aa2d7a3e012e0b8c5579ff804bbc2881ef84d85a076b000132285a87c9753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutau-guavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf55ab97ddda75785cd7eac9e95804e650182915fc71a8255b164f3fe4392b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601536c62ab1efa62b1756d26025e7a9feee4092e127737564f38175188c0cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-aafoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff972d9355a938ee4984c9c374c241fce84f20b384ae423bbce7c8d2deb74167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a05b39bb4a2c4dbe9b4650f9f0c8c0fafe9e842f3b124928f61fff9b6b52e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-ubia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40eaef77c086f5e33f40e3656b36000d515aa2283543bf1353314756f355939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogi-gagofogaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0725209b88e6a9d7e308a920f98d5581dc50605744295cdb1688d287661a0128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunista (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949c147b1255026144635e35812b179f6bedb59b4281f9640cd065518a368fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nura-suytif-dagibauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024a691d456cc7c8944806057c664a9b7d802d817e2e78411e8426f2269578b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutau-gavafiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77cd84410dff9d0f1b64f20c3b0eac3eec367be617025853c2ebda30a4c15d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afifa-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ca35839a262070cce164420919ea7fa06920470be7ce72cf4833d6d2724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-gaasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab94f28224fbc1fe2bc06c3cd73ba7ceacf6213d21dc2d0cd37adc4538dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173821 Malicious code in digo-kaimi-liabokam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d673570cc5a9bbad26246b7ddb3fd597615493b69930a9d19bf7ebe77539151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174832 Malicious code in hunimana-satiub-nabib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c44a45894af7ced51f900d7c110f146cfdae5644c7b9ed570bb30cc4a59d69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176376 Malicious code in nokire-kushina7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1a2579eae030d3c0076d9220d828bf0f51fe2e2ccb2c323df5736cd5017b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghih-fifffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ad5a8a8e0c5e918ac7e89babc8f0f78f77cc92c034dc531b4e574c9f04c1fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ulokia-jakaofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ecaa3adcc0200e65a901299d373aa8e3410ae1bc75126c4ad3ca86ffcf6290c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...