MAL-2025-152800 Malicious code in arif-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0887817799814186db4d1b0cf0d4c742af25714fd7f27c40b0941a585251c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164103 Malicious code in pilau-akvu-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ba35902c0c1210305d39f2ddbe4081de0d0c283a5f77de8a1df9e8e1667ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169992 Malicious code in uinsu-lotaihmi-klu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b219643f1e884967860a71b76e84fb075c4172044242691b6ad0aa4be137196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152720 Malicious code in arif-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ad27bb1df64bd43377d898bb94704809e1b430544a6a70f099dd808e20fa72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168177 Malicious code in tealove-coki21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44efd9c20e2d7604909dde490c22206ac89598087d8181adb131ad9c80b7dd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157674 Malicious code in ksunsu-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514df3a49f1d933b70f1c02140d00dbb8e1e1c98fd674b96ccbb7517f43e01cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158718 Malicious code in lookingan-namala10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d0b16213f371dc04435b420517124c25d8d2282a6b11d60125e9d2dadec61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164324 Malicious code in pitra-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d18c183f81283ba4981bc8285325c1fa45e5646373b445b7b256f1ddec17b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168172 Malicious code in tealove-coki17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fece8cb60cee27be7edf8daa47e77fc561fa766a27d1197f472a17cc8acf9102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164223 Malicious code in piluka-ali-icpaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c8789cf43a0e6d7ec379a93fba647919050dd0c722c99087978aa03f9fd237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroha-manukangia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1ae203efa70b8629cb3128a10a3c6d6f819077f6f7d3be9d1e6005bc4911d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f533b447942f09876718e53b392b4bcdae109595f4cd3c892ae40efb2f87ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/miwsads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd67e95ffe5d080ab223610802562bae6007190dd47116e1f68f59abd296f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b348d730122e00dc6b39ebddd6f8e926d0912591d3c45d2623ddeea6fda003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cf90cb15c2f78a64e38ec56687e8078c99f08e43eb701346937c588c9b94c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-sfd-ss3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6149f398396ff14fe931b9336396e0298a7610cc79f09ec7ec893fb015ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/witaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27f8865ce8b5753e086c4247df4436d40d248b0ff7417cbc893a29095622987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8817ef11563cdb8df156527e9c2fe2f05f3cd44ec86e37c1968d384472347172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324df10978ffdd442e1121440da65f3104276839a1332cf72834f1a93476f44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...