MAL-2025-174633 Malicious code in hitachi-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb8086d6af88e3eadc51114038dd5d2c004a6094ccaafb582c07a54259eecb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174915 Malicious code in indah-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3171e610e287929a3d2d6de3b4a69e448f3fe4408e39713694d2036ea52cfc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174638 Malicious code in hitachi-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ebce0be6e61c392b3a086ce837c4efc85f875a8d0020c21611f385d26e98f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nutayur-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e16acd45bd2610d2c2703e0896b2ec0091ada25a155862900a67c864106f6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saufdaggafoi-ugaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1abaed1996ffbed75eeb2b51183b2471e2d67d0828b709041c92507d273582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461040528feb7929f516670438a4ec83959bced0e61fc285d9028a3189a43cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-butaaur-butysa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1d0da77b7d7d819847b245715f75bfa60027c8110a754f666eea0c5656789c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sugoodaini-ngasa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ba41daa605133fe7020a57ccb9b44ae0ab84a06ba5a6fcf6513016ed15638a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saviotn-tiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7e0f009ab00abfd969d71154d917ec0e173b607c797bc057ded2aac1835d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saviotn-isssaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f5ecb18716b938408a70551edce9bf8a3df6147fb6080a6037f0009abca125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319f34f76cd886b5b8bbf3531364a47f4d1993bbd0cc305db91cfcf237b037a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afahof-raa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbc1e133bb03c4b7190a6f3a704073fe7b2ac071e8efa9278c972c4bf98739b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8b3ca1879c379d993458af9fef2bcbfe6968faf7fec8fcd67de7dd534fc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-aar-bya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57eb4c4fc1f1bc6b1ae22381451c8f018308440f3d733cd58de75621823cd457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukuola-joiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18796cf15f22d86c6029281cd64d0445b8eeb9e383945fe94998794126453a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamkiaianor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e40d594c17ce4602ba839338af3da834648f2f9b97b534a1dd5c5cb5b05fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9c1e16491137c8903c0f1a4596fc31a8db2168ec7f98ecd0f644425d029241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-manuids-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac07dd9c2fe57277cad6a1109cc8260d64c79864c0e7284612e91cda973d3625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banubo-imanumbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b117cc063f77af53344e303d4c8cc085823cb8936fe5168e998bfd2f9a23ef25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jokiloua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adb433fe17da21678a7aed11a101e9280d4b0ad0c876859c977684619fe00de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...