MAL-2025-168643 Malicious code in tealove-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60141c12d908e6a5445df124a6b5476ded26d4e23edb744786a30e5db874d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153547 Malicious code in avomainah-frasu-ofru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a230c0ee64f5687aff6f520124e2170425e74ec30785be2713bc4ebf0e051e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154605 Malicious code in dian-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5cd3e314f699d6d3b04324a896998cdeffe83cfd404917bbf22171eea1b123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153613 Malicious code in azhar-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcb3ce664487c8a9914e358facc756e057619d52d336eec911534d5b8e35881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163532 Malicious code in nokire-zabuza42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff7c3763e4e3f38335984df4084c1e95c9767e0ffbfe46c2011afb9d3e9f4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymeria-yuio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890769202b938529972deb19414a72703b371d94d74251b2d3a9bb6a733019a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-au-idaduasasuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36777ca2c4664675e88f1d8261a8236d0bea01df7dc07d774a14011c2dc005a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056f9b389bea19357a05555dfe42d2d717066f022f7e8932b2933c4c582ffff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07abbe574ff4fccc10c0b076bba94df4abb1299a034aaa91f4d1c66687383df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudl-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868d438a6a4fff0265310065e254eb81ea70082270819dbfc9ae83ca166d16ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1276ef60132fd4de41680b77864b69d286b859d696f0c1136a8f95ea895fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uyafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b4035c7f099287351a4bafafe6185eef8316622173a8806c0ce9b7fe9e4ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafd1cc7856de07c1d8049b9feec0cee33bfc31e82a4a9fe867c9e1a974886b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e678297ad648fa98255690310d05c74332787ffae69c627747f7810887cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadsaku-qeupss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2712a82241e1a822031999c31c7f69b01cc5075030ac296804b15c2a98048bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomin-nosu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a1c721c973064ac7376c940cea4c11ce0530b1da9ac7e4513b4f3d393cd6e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulio-luokafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263f78d68ba991998b5c9554ae1f6c9f6b1d8136bc883c5c47aba4b5c201cf1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba0864264f9835d2d7482657c48a3de449c89e0acf1ca8c8039dd2f94569732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vaklikanumba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a3adf5a0e76e3e020a59104dab03799189252474ca635faa87de0818a84397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobali-janua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20568d716ac8448b1808c592cb716cf5ba125790dcddd3ceecbb1cdd05630f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...