MAL-2025-174723 Malicious code in hitachi-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d4f818f68f3fbb9254d4fae646cbe0c7726584f07b11101eb4b933bb20fe8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175417 Malicious code in kapvino-soni-fuvdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cc271349939a1f27190564d7fa30bb321f214fde5deaf6a39f6858c75400ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175734 Malicious code in kupaio-kulaa-jiaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dbe7dd55728fa7b7b68f43562e1edcc6f40a7bec015634ed3f40e78a099513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gisgsgghb-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2708d098861703287f7625978c0965d79ff7d6401e1be98ec2aa40391e6b347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-mutyu-waegsur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85d3f6da13698e28827d39578754d0cbb56b54747b882d9a73e86e0c3630d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irfan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c525902ab84ec722686e638cd7ee99e826076d2caa6bdcb2b15aacdf7c5ba339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmg-fanninufaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9bc31b966249e54021c9ce055acf3284947a06010e87c7877609973c18c813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-maayav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80acf1e13e844c684b5f1547c4d015ca5a996289988791cbf41c059c7dbfd672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-adagoimaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00711a2370a6ea468dd3b250e299cc3c057d53d6c125b314855a821a3d584409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-busrt-buyrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d1384dbc6221fe4a0c0780884dd5598b368af660e9334acd5a0a5d5880b97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-davataihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfd4520a1da95b8ef50a573df4035307e57006b762b0c92e571f5c89779976d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nur-suif-dagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20a21ca659fed5da2905b10f86d3b6280fe2e9badc7e70506e4eadcbfd4da3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-yust-nutrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538ec4857d649dd9f18c7a6ab62094eb12556516126280c0f6f98635ee5f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-sufaniffi-caifs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95589de866c6fc40d78cfd32761574f53c1637009a9c195181e44add64e44dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-aifafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c3c888aa66b56954c08287eaca01d0e2824ba9541fd6f2688166a94ba86bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-fa-aneraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6e1e167fec6aea9791ca4ec469e9f03d58765f6fa124fb7d9edb4ea64f296c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaha-erws-del (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd7941a62605a9db5250c2e690753b30ae0f004838f31840d370a531525f634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-icav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c381652f53c82f8623c38eb74bc8aef5b44f81aba1ae89e31614ca04bac4f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-uty-milo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94b4f4ed82449d056233768eac36cd703eb00bc17522a033d7bc47d84e7fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-vgpag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18cbe4620f65cbe6f1e405bb8bfd550b3f226ae84551bfa3dc0342bf32dcf291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...