MAL-2025-174737 Malicious code in hitachi-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f634870d1a4cce67096ed92b52e12f109b82e4375d496b3a7fee058d86a8bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177949 Malicious code in polymer-gafhgai-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e781d8e25291b8b899608725409d1c384a0e51426ac8e1e700faa2544b50aece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175058 Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manuic-tauwaanaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f4514c7a8f3e15e0aebfa6602562f2ae1e0f49f371d9f3a40184e0e4bc54c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-nutafyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe16e0781585cbb88b3de09fe7ae0b2cd1eef53c0d0813c47cb3e1b58380168c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-maa-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fab6fedbd8f2b3da0685d7a81ca6b7ebe8dfc26c641744ec381655edd3d7f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aps-leod-nuafiago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be5b68688b33ca1104ddf5abfaa51e6e76716a32e41a12a39acad0f5b34f524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otodfio-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3d5c1471aa5292fae0936466c1d2f9d46ff81574e8193635c989de7a0fd8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otio-nahgiagfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36fe4e7b85f845cd8febcb213286c9eea88642543f7400dd0a554e7692724dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6f905607fab47dc08a967c89b617723975256a5fdd1ad634aafea2c85a1ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namei-mla-abnubuiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73427ce10d3078c5ddef159110cd0bbde135dbd9ac9ea97caa4ff427bfe61f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-lepaod-matiparahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78eaf25952eb5dda865f66caf4b328e3da96243200bf19b18b02644b220db28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172191 Malicious code in augis-lepaod-matiparah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264162510547047e9c4464f0fed342ef71dbbeb81924b6e3b7fe974acf7950a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172425 Malicious code in heres-matinula-umanadia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676542df4bd492cf64277305f7a55d98c0b18ed02819726ad2fffc3972e6fc34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172407 Malicious code in heres-matila-unpamfid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8710687f7eac8f464e7ecd93ecd2bc8605002230b5b8e1faec41b565aedfaac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172204 Malicious code in augis-pod9r-guled (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839b42aad14a45984b80d029a4ef1e19d6c03d456b81cd035fb8441ad6716cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-po9r-nominaly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf47f8e766906012b5d911996e6192dc869bb5aa661ee395338eaf355db5e2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otigo-nafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23a755f04a4a404459e89650790d4930c842e0faacdcc8dda133eebcffcaf80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172522 Malicious code in verts-otigo-nahifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f167fb7050436fb4bba1df6c467b6b80ee65afd113c5fab588641f6a0bba053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manic-tanta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1eefcf0657e05ef79aa2a6b0404c965a0fd0ef5598c19a398297c8d33e829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...