MAL-2025-175003 Malicious code in irfan-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efe9ebc76853d02c4aa9575bf529a7a4fdab61451a89d9870b2df25d2aea95ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stvbu-gainafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47394340b697e928625cc8e72428002e0ee740a35d7103f9d19371cd4afbe9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175699 Malicious code in kupaio-kia-jakaopoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88c37dab832e53b38b27d051b082aefa8e883fe7eb47536c63258e7a66b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teriu-tui-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a25f3088af4013c6cbeb7dfc7c529f81a639c7f02326b9558954b2d1be953f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173753 Malicious code in butry-mutry-mutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84321c251bc54e7efcc426591b1337e4460c7cd28b8d6c13eb706597b2d1f3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogahh-fifagfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fad23ee995b810059d62bcaa762f20b11a5e661dc83bf09e8771ce7df71d362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97e7c5da75c750fa911328ff297593fbf76f7a616e544e9bd4824d6784b9166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175657 Malicious code in ksaki-kaisoim-olosdsdggnika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a2969a680dafe2d1042e53083fcfa8a1282029e98c05c67d5e4a27aca407a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-na (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4ea437ea6a1100ae8b6ce856228bf061adbb9cc546260836986e01035eda47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173199 Malicious code in buis-masi-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e61ad4a33332aee70dd0ee622f6c6b29952f61434628d034c9f14e888c07d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177094 Malicious code in nuyar-adari-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdba37347d039fab0c2e20836dc0b68f4e1580d6760e104bb28f2cd9ebbb1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176314 Malicious code in nokire-kaguya23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba2f2aaed922c01f0737229da96e199a3404ff57ca4f3dca4cfba6b88546638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaka-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be38d1f789798a2a7aefd55c3ca212eba2ef60d64f2607c8c4f339cf5279e9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanabdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6ed025ff8404821e1f3684303079187c8f2b9301b3dd97f6dc68d374e0c0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177046 Malicious code in nuyar-adamir-bardia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79d374788bacc6ab34aa4debbad4ce9c702a24f58d72d422ae18aa1b4e7c2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174863 Malicious code in hunimi-satihu-angag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90dfa2687bb4775add53d64278ae7762f4bb6b806401674cb945c798cf70a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bodadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c5941530280809ca37ac109dd1f6e10f464fd338582f43253ecc8dfdba180d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunimi-satihu-angag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90dfa2687bb4775add53d64278ae7762f4bb6b806401674cb945c798cf70a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunia-nafanada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb583c823924a4752c1dec17fbd8fadd4ca23e07a03dc5f9902221d60ed302d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufabafgi-sufafnai-caubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4bda7fd77a7f66a51100735dffb60f38d23fc737077cdf5fea782311f36027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...