MAL-2025-174538 Malicious code in hakim-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14a8282840eb38da19874f556ffa957635d8c5577bd6eea4e1f08c481d221c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fafgsjkfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effb4855561635a5da3e51269e203f2e13a654d72dc50245cac1d789c43600fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df28d950e7774394bd017a7864be704cf5d331c532fc2078856f3474845f5335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175570 Malicious code in ksai-kais-aaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15fd3adb93a2fc33d82181b64aeb308b94ae18dbaca0028423ad8e67e030b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177576 Malicious code in polymer-adag-agisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8069005a84ea9426fdf9b0ab7f25359c6c22d470dbabde24b75cd2b63c9f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f95ca22d6a62c3e502a2cd56d95b164f63854243e324c1f6762e7d60c070031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177477 Malicious code in poglymer-ognagah-agshhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0ac6efb72690bf32e10b72eb4fda8bc79d500671b64851ac78055e4f80cce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174504 Malicious code in goodan-ngasa-abainafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d00b72a48d32fb6463b755bb21d981373799cc45ad49c27136c2db9736a907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tuua-in08 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7fa4fa60e621fa7985104ff3eeb499d84489ada04d2e26a46a568896cca87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialiaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670574322d748af1f60ce7b229968c40a5c371ea23895a0a6db6bef967356dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0150b3c7b71c39a855f051ff21ceb1658a425f33122d242c522b53cd977ae39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satasamug-fagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f453ba32eedea235c4e94ce7728791508434340fa6ba3421251eb4127a7c01c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-setya-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47464ea16576968568b1ea889845e571752b23bb8018bc20751dd6551f250c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaskia-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88086ccdaccc1bfd0c363c7a487bbaeb16438174ce5c294e475caf062fe2b28b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oagafigfafalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f41bfad981250f06bf52e540f0c214ea82a0b3eaef2f56a8c0329a6abc77b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hauli-miadil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8f65df6275a8bb2e224e33ab28f426ea459d45463c261af176fc9a653f7df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37974db33adff9c375ba5c6c1a22daf32b288784ce87644a346037ad20bb099b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soafadi-vnnds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920d25ce683ea4811a23d44f5f9554e3ca21085c5ca5ab6dc722d2b7b415518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177714 Malicious code in polymer-afifa-gna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b611beebb8ab9fa09fdbbffd41de4c5a43e42543c5c7f36c6eb8f2e81f4bc17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-1-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce19f169b8af3c7a43d3288a1cf26bdf65a804a7af2643e12a43e95c65b5b5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...