MAL-2025-174689 Malicious code in hitachi-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d60d852b51b5d3a82a2ea23ee1b5cf769844cec364de40678ec6d02be770ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174377 Malicious code in goodafin-nuiyag-giftu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dae9cf934f1352257a06a752dbfb8a0e326b5eb2c45bdcdcab4f310e07012a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suinana-madumovfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e963143bc2fadd80c98a33a3be3782c7b03a216318c5c0a04d64d053178193f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172635 Malicious code in @mipta1/r2sea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442cbea11f086e66adcb82d8454e7e8e26e6dddd9ac9fefac76ffe3f2067358f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-sai-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bd9f93de9d85eed34bb80d55949e13b7fb48046c641aba5e2daa1ab951cc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177331 Malicious code in poglymer-ogih-gaggasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66d8e21102c154a5c1b400fe8ac796530938f64b62c974b04a36b6b89959691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175428 Malicious code in kapvino-sovni-faffsgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12576bf4e46353e9b69d015bac21293a7abf2170710edf32d5f00686e9b3b923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174662 Malicious code in hitachi-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88401effde56f32523ea95a7e866ddec086de655368ddb56f60ba9ae0f8c9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafsa-darasifafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd09f53f9531281f53a147470ee0b9ae52fd3ebb5d147ee62a8b972a82c64df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175807 Malicious code in kupaio-uloka-jalalalokioja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9059a26a4d4d6310e3b2fe06d0cbbcfbc243a5f7f72e69b53690f33096977b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapino-samvnavu-bibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9c566586a56753bfdbf3e79a6a0ab1bdada37617f81def92b5983995efc8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81b03e4420490bc7376be6a23a5186397f8e20d9f2f54ea11d6c48f9928d0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177166 Malicious code in nuyar-ida-rada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20df5c83458ef2e9f72c4f4150aa311c3d3986317458573ce5b86279b6aed883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farvaadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86366d72de6ebaa4a92b4319462478b109cc931b839b572d7aab3402399767d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goditu-tuamva-diabud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07fa8d043912e57aeaf01c3e41edf547b8150278760b07367c4555cf5eae7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-vmiam-buna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59111b651a031e41e4b4f5cf496489e325dc754a8ce3c929901825cc80eb0d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177835 Malicious code in polymer-avoafifa-fagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdc49e7446c3ac70f595c3921d63f69f373464305b2759ea29939fd6fdb2391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogodaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d814e6ecaff4819d17c0596b38c1f3db2dcc4875b61af1de112bea60d5c74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172879 Malicious code in ananda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a409b0910ae4cc8f0b9a04387e391a7b7a8e3f4dfe9df43188ee92c7233d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179404 Malicious code in zaskia-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11e9575f662a4170d9eba55f7d6a16156a4aa83a8ad4423907fe82ec6a7fbaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...