MAL-2025-174723 Malicious code in hitachi-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d4f818f68f3fbb9254d4fae646cbe0c7726584f07b11101eb4b933bb20fe8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172971 Malicious code in anidata-hopanud-mafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3790d7abef5c1efc7381169401fe24687aa7c80eeba68cb275507d6524ce6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175380 Malicious code in kapvino-somagogamoi-faagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab1ba177816f60a241d62d3c06d8d486a2676406139786dc454d99e5ece005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173737 Malicious code in butray-mutio-terui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c031af68fd16420536cdd14050602a00c946ddc20733ff42af88dd319acbc8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagiuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2bf379c2571fa8a848ca94ccf5512522291bccbd783bb3bbf572e25e6b39db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avim-rusiinva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d377d422d0d04232231e942e2861fc67db3e89a5d604588364928dad85b276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87efcb180a264f61d67df4f9e883fb9a57926d81a067251462c0f2000dfb278f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-iav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e276412e6ff4d8e3ff704306ba6bad87aa32cfda0998eb2ab8e6b954c94c2cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-aifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3823c5f7c1e6f9d8b6c98da2115dd033dd0a0f8e80263d69b67f8939e873b2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasiovagfa-ratafavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772db65711da31ac9f2ca2210f8c9c86ff380849edf2ec83be6f33b37ed94622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasia-radaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d9b6700e20b38de85772a53eb2da78d65152515884bc50c10957ee283d0b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahuar-satidaf-fagubao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de3176da52d3b7a3e4a4538c9e71b5cc3823e1e74d6a3cb6fa3b06af294240c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kiloa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e445cbf4716827b850ee28662ccbb26ddeb6542de7d1c25200cf1a866caac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautug-gaaigaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d96014c10c98a3dc319e6ecc2d5bd0e813991730f7902ecf0efe30dc148e41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jiakajualai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e783d84affe441093c90fc6f1418e94a0d75c89389552ade87e903f29948c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510d97affc75a2ef4b70b8ae366ac55482189f769aca9f92475e807198f3a463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-nusadsta-manudda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a810372a44a94fc867ebc8e65a081fdf86d695a74883f7ec7278c7f628d038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hadits-reafifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e67ff5b9891856f3f5f82b7e65053566475e762913bc6b9f1717673a66aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456b465bef3e160074f56bbc0a38b50917e1872897c031dc15f322dba9e5eed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178145 Malicious code in polymer-tyud-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f36b404ae3c434d391f9f338c51be9a5aa4a0aea91053c5d5ac7d9640aa486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...