MAL-2025-175506 Malicious code in kiki-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90db83d9ae29ff810e3e3168fb9e4f382ff923c060c26cf27c4d6d0973c7dc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173217 Malicious code in buis-masi-maffmasdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430b3ab53ec8ffe1c7917a58e85bd481744b31ec7944a5b442dbedad27e73871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173334 Malicious code in buta-fadsg-vafsdfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421666e16c7824ceff3c2c4c0024721c5c02636e7cbfc33c011c77e851f52ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176054 Malicious code in miftah-miftah1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12cb3fc65310dbfe3f4cd20ae266000d8391b6d2fabc15a449a2cac6f5c7c5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178554 Malicious code in sahufarf-satidaf-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140b98856a1f3ba237937d9f0352f30a9d20b4fa73e3dede89ee57ad288530ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177430 Malicious code in poglymer-ogminamh-famaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e9eda6b5410d677b997cf7ddacba4152556329e848059e6a1ed8d02bb4d6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176952 Malicious code in nurnua-suif-daganayui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6a1fe5b860e462c67c0e5dbebb857f890c459f6e8540fd0dd538cb283077b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-id-aiforxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00beb004d2c44837b7feaedec8e4c7c47611b649dafd0a68cb836f25c125a0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafi-ac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4321defa4c65ee9a7aacffb3576a9f313a8994296f2579e3d6256bf2803654e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaim-liamkinr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d722cb23c5b70710b3e25870348487b1570c750271a96a7fea7750b0350423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d561279910adf45252e4b5256e91168fbae024794936d9b3931edaa70e5d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1c40fa2eb37931cff63cd1b7892ea1a6ea943eb38575939b6cd59cf530ee9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buyavad-manha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52405856ca6387c6ac0511f62496f5eb64254b2a3ce74fef3f21cb2bb0da341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofagfgdi-ugaafaoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c775c1af1674813232b01153d30a8776a871165a7c02a23873fb7373c76e5f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gi-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f1173e914293848277dc10dd55f818e7011f187015e39d1612aa37e46a612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsagoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044feefffcd26d1f7b5192fdec6f3cf01844da412a727054e7afc4c7f375595a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognagah-agaffami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0ddb490a609da88feb7d8a9239ee41a97e39e6e510d828280879cd9cdc920a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adri-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8bc4cb616cf2f0240b87591c99b3452f136a630277a7aeb314f1e51ef8568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasag-fnfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cded208a967f012f649605b248a1fb319230b618706fa688c8fa4d67f770aa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-daerde-oaalif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f4313ea308ae524749c7fc45e88150d5395fd9ed1a99426d370a1548247b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...