MAL-2025-174742 Malicious code in hitachi-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd88897122d29bc66ebece571ae9f020d5ed8787c031261c69e204139c97af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174332 Malicious code in goodafin-nui-gibafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b2dc9a145555aa1219cf0316e38cf9ea00bfa5a6e79f0b4a8a775def465613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172634 Malicious code in @mipta1/r2sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63e205e0f63bf74e39b4396be288b4b8ed7f38f09f35c3bca39970211c2f8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179173 Malicious code in thumbi-vs-trud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab027cf060ac98adddd8456064cd11199dd4fa65b1792a1c6df1af0d553a96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175548 Malicious code in koko-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bd46c11d25c853b8baea11a092b7037039b0f0da2efa84d5adf58a43ceea19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178106 Malicious code in polymer-tehh-trusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaffe35204d20eb657dd67aef6f1f265e4ad420610d74161feb0b9a6d152a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175522 Malicious code in kim-jiwon-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c7cdd6ded9086f94e7bf15a23146c63b851cca2a8b91826212ee985c741b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172643 Malicious code in aaaaafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d5ac3052cef0598d857ab13fafedc8ed738f59ad762805832a951dda613f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176907 Malicious code in nuragi-sutu-gaiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233fdc6731d4c66bc7d61a1677983bfd24b57b1c9ef28468c2c1909d3d8a3510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179321 Malicious code in unimna-safi-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea09f21cd51de514a9c57b8b794e20a67d65cc3f0a94e27d922965478f77c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174340 Malicious code in goodafin-nui-nutuyagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86022f8c40ae1a3e1eace9a6713a87758f3cdd7f81385faf4e68fc6b25702ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afffffri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e8893e7ac2f02aaeb4017d0fc4f11426d2c7ba7c2849fe83f73efa5fd50b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177302 Malicious code in poglymer-ogih-aafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420e7174f37b82e967d340a002b6f7be2fd68fbaa880c50ae84c86423b1884c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178385 Malicious code in sahnim-satagi-anjifangaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7ddd5d3be818ac88bfbcbbf1c06d8ec0b0ca1f05f3ec3387568bddab099c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172925 Malicious code in anidata-hapdits-rso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fadd64cc11061ba2d5cf18cafa85754dde67d1cf8dfb1bed71fc22d7288151a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175242 Malicious code in kapvino-socvni-fambapvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3d08f1789aaa5d15188ac2e174eee1317f125e6b5117247a9d0b2e984b9813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172758 Malicious code in akuuu-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70adfef646c6c52ec2969c35231e491b4f311f1070787dfc6c2c432914161da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174196 Malicious code in godi-tufufaja-inufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4bb4a81725659c62e67806d211fdc8b1bcd2f3e3487df0f27d44d0d6ee6b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174600 Malicious code in haruni-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1327e71b2842c14a7943bc0f16eb7b0798fb80c684f79b45281992aadbbb6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178527 Malicious code in sahufar-satiaf-favurafant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96e62dad0d88c2afe1cf661b2f2730cb46f15c8e9ec4569158fac32f2430018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...