MAL-2025-175054 Malicious code in kaka-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa091d065736fd5c854607e3dbbb2f3723ad5dd19c45e24f900c8682cbe8dd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-vreds-reft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0ac7dc155bd6b5f4ba1d4c751c296dee4b448eb7b1609d052062178d89b682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178321 Malicious code in riya-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecec71be0d91e614f5cc40ad44742e2f2d098d91e78da22333074470019d82d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yunik-reus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2e4e97bbc76a9647adb2523857ca8caed56ce8425c605f93578c149d20398b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahufar-satidfaf-favaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7678a8dae610d2ff783509472d698956267aec5c1f0488c76cf2df2d212897c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mar-afadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f06c0022e3e3a990dd23ec84402398f70aff4f83f88a73541e0c1d0486882c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutravaa-nutafrd-nddfudadtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addc95532b427c2af72a34f3d71c35b77856d06c172564ac5fd07f8175b2b4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksai-kil-kokaialio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92822e7ceb164203cdd7b695ac57559ffb49c0ee7e85f5352403a08d392e908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-daraanusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f932f2405a7104b9f4aabede598d760fce5756008d2fc7623a5ca2a03d27bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapo-samu-maima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7e3e7d2283dc71812420c5afaa766ebc5e9680fcbdd2775d436f501f8964b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-joko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7dc47b64b10ed01ff8c57b67161b73f6abf69d9943cf3c06050dcbbeafbd6c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banobfo-imufaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b02743cd885e19b1563c0eef601754285a43c09ff163bc2c6e2395b1f191e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hokage-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e7ce9671decb3a6c3cbb346ddc8b64f190133375c28d9e4b59ad5737f95433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37167cf41107d871f8bdb660ad7d337b0e45dd06658c46714c8ee3fdc12aead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kula-joi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badcf6b31e2e9b2a5a34cf345f62d8338f114154c490de31af15c3f7e8a75da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-mubanavba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8e86e3fc9d1628f64170c0cd8c8746e389f6bf26ce77f273578a8d158c75a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-mabac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82f8e52249f143398dbbe68aa329dfd21622716f1467ac611c50f48786b2d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rindaman-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dbb996eda096b19884866bc6e7322f1dea32e72bc1de78ff1b5be9ff101847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socovni-fai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df28d950e7774394bd017a7864be704cf5d331c532fc2078856f3474845f5335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sovni-fafsfskfsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c6bc63015eab172687e70ba27fbfee85050cdd7e98cc2a613e96d8f6d48a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...