MAL-2025-156275 Malicious code in ilop-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074d0952fa925219ce3374fc5a686b3b8f2d8f1077a09158190e7b96f5210c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164789 Malicious code in rinto-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc32197d5ef15b6d7d2bd02a009697ba1538ccaccdc7470f161bd52643a1baa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154460 Malicious code in diago-kuli-luvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e73d01905e58f3c27470c958ba5402332591ae485bf4fd6ca80992cf432e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165350 Malicious code in sabua-muhay-tadum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1528c2c2b290651dbdf5ae69c45589533cee88bde8e86d890a7771f04d5652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156086 Malicious code in ifarfai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a9ca3ede4ef2771002fcf9e7289997a120fa869ff99684862c9548f1d38fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168424 Malicious code in tealove-nameka40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaa4491bd29de5bdb2fdd75e939f8f6be99bd92b6f921b17f0a60d2217cd4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158150 Malicious code in lina-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abf74803326fedb4c1484554d9cbe73e4ad01525bad4ed3abfb00270b1516c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166101 Malicious code in slamet-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7497b7b4731adf26ab8d4297fdf4727fa5e9b73808ea3319fb904d609f9069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159194 Malicious code in makan-aigoamoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abea32302e1142058593ddda550633fc6df543c04a9eb2c3b81d576d15625f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc8d1a53183fae0043ce3e4f177941bb5b5e2dedd41cb70435808d09c5585af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamunnin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010c3045a2f459623fc2477066dbf6178c43c8cf7ace6c04056d17031685fbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutsr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd596fd3da9d27f02b293db67b4253631eafdeb8edd106bc8b0b42fdfcc2d8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3595b082d2f5f1a3e02cb67e18fcc4994dbbb8290e73adc4281786d07d3ec769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-agogoasai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1711482f122626048081920adbabc656cf3e2962c2dc55ec6d6b1a0619889b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-afif-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd02ae622dd3c7c1c110ffa7683444a08ee759876579f127162dc2c572f4472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86d4b456a16125221631ee2b20746acdda677602979d387774d0c0e82b23fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9620d9b53b8bb31f932b6d5250e84da89aad7961b372a8c2799ab5133ee96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-ezrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23de924352d67834c7e9becafc5cce4dbc53ba192fc68c9b1b46d31ff96220d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...