MAL-2025-179389 Malicious code in zaskia-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c5e26288ed6e05bb15d411e9f2d094cc2063f9aefa89458212899cb6465999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otodofio-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125bb54243eaf932965322d8a83ebe0ce7c2b8133e07f2b5a518a8a69ddf614d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinla-uinni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fc8ff7bb0b3ce717e653f1f41cfe823117417bed563f975340cbba318ff355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170609 Malicious code in aakifnabeel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4fcd85d0427c9e54454900de1183c8d2fbc79e1ebf9d6051146d9a4acd19e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171836 Malicious code in seanfionacollinsmurray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c28c1876444f332875f70fcf72c4ba263b518c4102b2aac24be9d50f2229130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171026 Malicious code in charliemorris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb967298416daa466358d4f6247b8e6654c7ff5ded4893efceb722778e1885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutsr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd596fd3da9d27f02b293db67b4253631eafdeb8edd106bc8b0b42fdfcc2d8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167920 Malicious code in teagood-yakuna6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083e96709bbea2800002d2c02d2b80cac043cf76b1cf134713b9ad306713ca82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156474 Malicious code in inal-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053717fb14400be6a9d3fb77f62633f71111098367af43abeccb9f4a270ee78e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165350 Malicious code in sabua-muhay-tadum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1528c2c2b290651dbdf5ae69c45589533cee88bde8e86d890a7771f04d5652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156275 Malicious code in ilop-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074d0952fa925219ce3374fc5a686b3b8f2d8f1077a09158190e7b96f5210c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158404 Malicious code in lookingan-nakomi44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f9b9a842e6c9ca6d3e7130e8b8f698d2b0a35fba8b8908c57b9435d8fe99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163182 Malicious code in nokire-nana3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f3e07462b1cb8c31155a812985f34e528cf2e6243748ae7f0b0cf832aec4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca73ff88763c251d2533f93da4dfc5aa44376ec44a5c4681626d2a269104e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-imgono-jinamug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e78773a4386a86d307266a4acc5cd93a1695f92acea8eb4b2c2ee42884e458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igafo-jagaigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817621ce0dc55ce92fe3840371140206865ac5f0d6ccae95683db725b8efc9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-radiant123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e629ac387dd199592baeea8cf9d06869d81bebb1af4a879bcf26be1495ed203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f414137e3bf9b6e24700c92c51eac8d9c6f26fc8f42c4ad947b2267518d5091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...