MAL-2025-174610 Malicious code in haruni-poke123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258d5da81d2ec841317b63e233fdd7795e36a34b0b078046cf62f9372eaa56e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178994 Malicious code in tearich-racing1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c4753a2e0371b67996af32c67176e5b475cba058d790955c172a6904b8718b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178223 Malicious code in rindaman-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a995d1a6757c2d89c4c418f9cc1cbc74a342cf0837b45fea09176f13199ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174287 Malicious code in goodaan-ngafsa-nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56343ab8082bc0be4f6097ec2257b3fa3d8d3d993e02fd1725b7b03a142b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173323 Malicious code in buta-fadg-vafsfgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7549a6b31b26870b0140631badeff000a1b271f46062c877b3a130475aa013c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f410f1267ce3e7558be2fa1986543666c909a6d39835410c7de1df06ee9f3cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-aifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3823c5f7c1e6f9d8b6c98da2115dd033dd0a0f8e80263d69b67f8939e873b2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keke-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0cb4ed302bff7988139df718277e2fb9d771e45d1e7d28ad5b253591db87b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47078113ec41443b7a259e156eab7e2b575d8c5cbb4c6a5114a109b77945b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-buyavadia-manahay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded9dd690f2c39782a6b914bb30d37da07567c1ee83b654bc695b75efa7a8906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeeh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb87fe0b1d48cbdf48bb27cb580473b30915548dc90bdf4662768d7ccb33bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tran-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c369ec238a56a66bc02bf77cc1e43a978afae1e987cb6dda65a52987ea593d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfui-dufafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a479e63815240271a80504b789191e1048975f96da67a38a844e6a59600aa86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagoimaiabia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e68c3b8da6ce36564a394ea9983aeb08c16931767d49d30e7dc02de46c9b8c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fiufoana-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fc42cf2e6fa7220c5719f09ca88f05870d4344533092312bd1f449962666c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kushiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0c45d61eceff1deda60b695121c60d413429a0bccb88f7469fd3f080f62e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiatai-tufam-iubata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2e82251fe80302eece89ffa0d87d59b063fc95716339e3faa8b865c1ab5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imubamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edae0b2eb9e837d0821f0d1b50b1ceaa96d021bcd988bcf66f8557e98855d64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurnua-sutif-dagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b26e6deb8f5bb15245c96778d0aa342eb86fa071a7366b12fb717ad6dbb076e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gafmag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13060c5b8d2929a41bb61f49248dc943822e0dbd818ac59c4a06b286821e674f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...