MAL-2025-174634 Malicious code in hitachi-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb6fa3afaacde3c664121850415129dd4544eab9413f80c49d71739c937a828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175242 Malicious code in kapvino-socvni-fambapvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3d08f1789aaa5d15188ac2e174eee1317f125e6b5117247a9d0b2e984b9813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177452 Malicious code in poglymer-ogminmh-bafaagsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcebff0f5c117724327054105577f66bf3d6a9b06bd28b83ec2f28ade67c1ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173046 Malicious code in anita-manahudda-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af89bf2b2df254e8459e6d979169ba16e9d6f822e4de90bf08c108d1826f0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178330 Malicious code in riya-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3286c093623fa187015304651c1171f7daf657f9ff5b5930638cca881aac1b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174763 Malicious code in hokage-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198080d270c729cc99275d3e9a510c4a55d233eb0eb56c8998df77c1acd08483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177874 Malicious code in polymer-avonf-afofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bcd8b2f4da87a3074e28a6f02b4d1d32379e2cae31c256fdbf6fa86a00fdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172745 Malicious code in akeee-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758c8096f00ece8ab40f92bb0a0090d166b5840f66bd9b304cfaf2bc079180d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173962 Malicious code in diva-tuai-inabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8303fd0fb7c22fdb154abbbd2ab9a23d778b1516c01d50f3b5db20f237d20c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179010 Malicious code in tearich-ralat6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6781695f9b2665be8ff8335965ce429a06f29c8528825e346d416f2198d8c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179204 Malicious code in tray-iutup-npusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494c8cd2b5fcef80e56ca888bdeb87e756fc05425470ffffc14d264657a7ae8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173237 Malicious code in buis-suinana-mammva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205b4c311d06a2a295098728919a40bf62def3e845447a256e1c40eae8c5b5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manuidaais-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5324a0657b1a36bc7a6013840e8ccdfacb9bd54e29b2e15c0f6f2565d093ef64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-lepod-manusiad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189fe046ccc5eab1d598f4287f50141fec4388441abf87d2e69e912e8f434eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinla-uni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbf3f03f66688a592d061c6e46a97144ba27c05bc25ecd2532cc8fb407e23e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-ogn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc9ddf02d91438f604c932bfd0b17801c4096160015c738f8501782a49975ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-riatona (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99551718caa84cec67ad147b02ae71a952722f98849fe7824aafcef17408b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172316 Malicious code in augis-pomoi9r-osc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a8d416823f502c5b35fd7c3ab3751dd6dc9ed858defdf8248c59d61f799ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172230 Malicious code in augis-podr-guledif0d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f427ffefe9b72a9644a6e7edfb84e7b44f2b856ff56a8e60e3fdd352c173dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinla-uinayni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54881a3c65ed1f4942c482a93b09f20135a9d484568c17b811fe42334322ccf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...