MAL-2025-175054 Malicious code in kaka-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa091d065736fd5c854607e3dbbb2f3723ad5dd19c45e24f900c8682cbe8dd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173931 Malicious code in diva-banifobo-imaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27269e7ad9c4593e967cec466c1bd1a33ce985bdac30348eb320accde291511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-acabnas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593032655d88a20fe76933f326a6996dd1e5c0b42dde513ab5143e7b77a28e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-madivv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a422af15daae6caa4e6dc105bf429d2f022554f488a8e09fa5c1ac86ebef40e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-buyata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f3f1ae9703e791c623ae8fafec7c1cd5809d9107ac49bd1279ea06f46a065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160f111b52000f951becc8ce6146731dfaa3a69a538928eedbc0de79774df410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-saduda-miada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8151e0d29533a2040eb4e43b07f11ec5ecdd71b3338fd66bf6c37d9d9c3a6a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogofigadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46a65169b6f80de879b0bf694ba9ef97f13735000741ffa95123881a59fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kas-ahakaoliaaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bff598dfe158fad783c53b6eb2f50467b163ec46820f144dffd6ec52474443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufa-guivoavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607f7a6e3e61b54819b5df9a2d886c3038f3a0969b03f14a36354b881f057951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hapdits-rso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fadd64cc11061ba2d5cf18cafa85754dde67d1cf8dfb1bed71fc22d7288151a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogminmh-aig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f481b76a62a821eeebeed3828a486c02609c2fc01cc477966f8cc12cb28ffc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipoa-ihdsufah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f11f21934ad74510e32bfed572f32a67715f58f5b7fed8fb9a880205c5c4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-stbu-gainafif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff3eee31764c094785798fed1ad869e2109cd67780f10dff5b4274143682f060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socni-fuvdavaibopva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507a8675f09df9d7b075f7eeffbf0d3f3dafdebec1a86c3adb20290e724fc594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dakdre-nffama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726fae350979df4a4968621991d03d3d6c0fa4899c4973a6575070afad3f1121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutayu-gaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c623d035ceaa825ce22156391548ae7f1c8742e231ffe1177fc6e458377786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tugai-iumifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263ec37d3a489e5bae423b335b05f530d49ec6fc13e67d6418177133759d6fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-joi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badcf6b31e2e9b2a5a34cf345f62d8338f114154c490de31af15c3f7e8a75da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...