MAL-2025-175501 Malicious code in kiki-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5ec729d343fd978e07e0537fb797a92e1c60593fe25647b28e9bab176236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174561 Malicious code in haritono-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9bfa6dab4dda6d005504aeb4376521adb6d4286f4040bc59c09aceb04f4ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173075 Malicious code in awaaaaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c58aca0c3c2ffc288ea7ac11ee648c2fd5e39779168de93e64c9b86e54b0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178289 Malicious code in riya-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb670811120e3b3e71e2ea15ae74fa6b466c10144068d0fb9875b61186fe4ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177441 Malicious code in poglymer-ogminmh-aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f481b76a62a821eeebeed3828a486c02609c2fc01cc477966f8cc12cb28ffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadis-mmabadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17207d8fbccc5fefb303e4427e4cadc6afe9cbadaa9a7b9c9f900eb67b5c3599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781fc8b91b74eaec10526ea594ad540a8771a1a2df29af73da52b277b632ca98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-ravu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c718a1175038520a4980081ded898e6083fb053a058c9f1f8d8c64eecc3573e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisoim-olo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d735e5d22f9c03270a63e6b2200d84dd6c5f2620a73e466007bf761daff20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2befb07441d57ca1944d0c580dafc478d96518397427a7fda34ae43de3e7029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninna-mubanavaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcd9389d72cd48f80dfb165013a3a8ca62923e915e892e3cff5413c8227b239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-nudanif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7d5b2995f29a0c367a9fbf04549dae95cf2f24d22e07b72c4954bb9b63aecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamair-taqibog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ec2498a2bb189134d9b5fd90ddc9b205b62625febc4988889e1a6e8592f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodain-nusiauta-nuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e790391ad6a1eb9f16681ee1e0a2207bab1b195a8d0563fdeaef5976236a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174747 Malicious code in hokage-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac05a151f319c0fb9f1978fc87b22eaec4b5a5c59ef884f36b4becad00400b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177498 Malicious code in poglymer-ognamoah-afiagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8705eced1b2a37ae17d55cd1f87f3e5ba9fc5de3320e9a9e31e1313e592c9943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-avigpafdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400b24f734d2e498ef7f649c944edeca90edb3e38b6e006d55d10937216bf04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e890e166e82e67375392e48f70386ee81068a07197433d64251a055e221233e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inul-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dca4ebe89ae666ed4b62f563c52cbefbfa3d24bdaa8bfdf686868d3edcfa35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d950a5a3557187bb0d81828abcf926e87d8bde169f915cd0d243476e32402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...