MAL-2025-170428 Malicious code in verify-aysali-anais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef91abcd8e6b43d0ec53add1ef7283c8abcbbb32bdeecbacd074d91c353a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155790 Malicious code in huda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b888cc698f25e7940fd6976df12029e14cfd02331dc642a9e72ed90b78794908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929f53cb0023b24915109bda79e7be4b4d66db6aceedc566578fa15be830841b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb0ddc22d9c5967e9c04ab458dff532c587cbf3d8c1f38a44bf40540963cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ef8213ec0f1187cf3f0fe5fd826b46450a9b4155e7559f1ff04313ec320da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0a01f2ec450d1b8d7ba7ee5e46a1e2e3115640bba95e0e62aa8c99c3695bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fati-gootda-ayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb9fe2f25539c1b1e3d3634df8d5f6f14ccd4d143783abe4ec0e19db52d788a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-muicac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422a8c2048c34d9433e4bd81672c1b01fdb1b11671eb0d47223e2bf53b0dc962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19c15bfe05277da4eddb13944566d3d98959ed0912121a735d78d9ff3dfd505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ewrauja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f7f2c921e27ac43a1fb96cab7ac86f6971169e611e21c92684ad1e913065a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecba93b6f7dca977a47980bb7f01cdeaa595a32ffd5f559db6d44fab5561ad92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d687f20b20b3070f1f09218ae803bc37c649f568297698841acfde1b99ee2b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9c05b90d3230f5f3a1780bbb0a409b9123814bb44b9ed3e98f1bf865bf6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c6fe1944c66859d8caaa214874b2ecd5bc55551b5d9517a9f9392dfeafbaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165899 Malicious code in shilang-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695921df7aafa6e3f8617204c29e5c95e4ab67e79c908c8a2746fe36322be947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161964 Malicious code in nasrul-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdd8ebfdd2e880c60334417a8d70aa5cbc420ff43a46f7cfc84aba93964f570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153303 Malicious code in avminh-afagais-ifafofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e7ad4035f5b5abaf085f2a61799f36aaacd1bf625b3588de7d38806147a32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159197 Malicious code in makan-aigomoa-iutamafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c2a5acceb5441fc54cba624b9e557ecdb8ffdf0d7ae978936b8bda5df73e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152210 Malicious code in alfiansyah-pok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da7e62a54982774efb357ca436203e45a9685c54fa187c5439b8a50e3b4206d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155888 Malicious code in ican-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba5e6bc2940cf0bfb98ab476856c303351e0381a6943a1444e0064aa48a279f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...