MAL-2025-175007 Malicious code in irfan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76283a5a80703064e8141a2de2fb79e83c64c3e08d7f4a72ccf032a2adbab3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175676 Malicious code in kuku-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edb6db674569530b62edcee85827ab4141c5203ad89844f556e6574ab51b41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afaj-ratfdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed485e9c2c410258413bb5edc623ace3ce92ecd543a408c0e21178ef486ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178424 Malicious code in sahu-satasamug-fagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f453ba32eedea235c4e94ce7728791508434340fa6ba3421251eb4127a7c01c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177859 Malicious code in polymer-avof-ahagopgaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66112974d1d6ec8fa4dfee3e40873ef3afe5bf6989fe3c2037996d9de6cd44d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-muddisfali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4116de9aa438a8908d4ee52aa32b7a1c3b929abaeae681ab1670d30abac96b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257d922371cb342807eecc6e4a3511ec5fe10e23861c6afadfcf07b937b45647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173210 Malicious code in buis-masi-mabdir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3d36f446733ffbebd2c29cf7a505493b4f1ec943dd2eea1546a74a7a3045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminamh-abafabaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06848f2b70e7121654f5b4ae31dbb66a37d2febf694b9310e92280918fb2eb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177092 Malicious code in nuyar-adaraudi-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e672a7d4e9a1f3b6242830c0825ef4a55542d3072aaf94e9335411daa103aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miba-dafda-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45db12e610b1d9bf971db21a04159dcd06a849a283af574771cc8653eaf5201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174743 Malicious code in hitachi-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103e0da0a0d2ae25808068477a393f8bd633181afd31c730cfb6993261b3562a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175374 Malicious code in kapvino-somagamoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2e4b8ae767cbb4c76b5825031455fa4c4bfb142e6ac154c8c00ea3d047ebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-mayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0816678a21043e0960b9ed911115ddcc9a55db9804da8ae2a6424765a884218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-limiaor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7459c6fdc3e54f8df17aa7ea4869b576a47cc02fdc6220621b07f7ccdb0140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174397 Malicious code in goodafiun-nuiya-gifia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2b0b865ae102a2851e3498ab9d283cb7e5f7195032291979bfe276303e4981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-buyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1ea6110467e3207e5c90eca52b43acd0cf75855eed44978c4d2ad35a522db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175354 Malicious code in kapvino-sogdani-odgafdagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f15fd7608ceff622af3157760d1e0f758554fd640a37d847b2e6dd1d1d69aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffec18c4de76b888456cbc43dbf16ae57bd1e7fd008f5190bd65886d3476a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-uloka-jalaoja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03e76d7ecc191258d16e60b5f392620d32de490489e9b658a174c1af4f7b6b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...