MAL-2025-175500 Malicious code in kiki-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e605fc86fd02a5f01823754cd6540804ba5ec1cb90850bf11133bec7618d5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmih-avigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b359618ebf761ae22156c606df5d8ffc95922f0613b02505aa4964c114c1947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178646 Malicious code in sayaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035fd0b6d5cbd6dca25d4c05616795f113b2b74810855969b0e7fa497d8be3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifafuatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f717c54d95d837cf02d769ccf2de3bd4e5384778994404e69516418c5ea878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamr-adaasafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af52cfdfdc017263b39290c0e2433b7a7e7795772b3550fe02999cd8ded95d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177356 Malicious code in poglymer-ogihh-agsgifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7b0b7212cb88686152b41dd46978df2af713a97734e90e8c9ba0b6d0eaa270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178844 Malicious code in tauhur-sofi-ditofuaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ad88d737dbf068cb007409e666d796cf39a1c04ef555d190505733f8c04377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusidda-nusadsta-manudida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b1db4e4f591048074a2eb9e160625ca2a4986258f8b07c92418e001e17aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179270 Malicious code in try-utudru-uyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc29e7e797b410307fcb9d7b24622e7c5dd74662c23754d5740d4a2fd80ae0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gosn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28750ec37e5d0e8b7859fd0c4c2da8cec435e843c0c6816e4b19246f1834e64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chafikbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721e8a3a65a9930db5343cf168108aa3a15d91a7d4f1e8bf69ccd6514c097cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadugsua-napuysop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426ebe17abbcea390d007c8e3d1eac0a124ff12a616d00d7d9146de146341ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayicaku-amuiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c56a54e5f69f0495c85a41f53aa5df1b5b915e38629d627872bbecd95d39a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166656 Malicious code in tadasdhi-dfds-nsama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5286cf2f1befc48cbadaa88adc5603f0220652865b633e42aed9a28a9bc2f5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc635cb08a5075d60db428d10d515fcc4f921d094635a833884e0d1719c354b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyia-nika-luyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87ee4b9d8c08b6cc4e6181c115fa1aa92b546a115d01bb48b7346617f8deb8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157339 Malicious code in kamasada-nusta-budadan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74550e3a3f25818324b23162ea2729560993d70219daf1d1317d25bfe8d11786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159629 Malicious code in manda-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af0b495eb8e5da519a1d76e2e6109a09db2b702eefbff041a6adfe0bfaf23bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzi-ilaoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a437062ba6c5c33fdf9309f659fd72dab7ebe897618dcf5fabd6ffe10261820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150801 Malicious code in @miptaa02/kmy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e65af9cf7d50c3942bdac7500c2ffde644dad584adb2b5a0542d316454c6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...