MAL-2025-166101 Malicious code in slamet-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7497b7b4731adf26ab8d4297fdf4727fa5e9b73808ea3319fb904d609f9069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162435 Malicious code in nokire-arjuna24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9b4a6e3f86acc20e09e303ff5e11f1bc2a4de58b4607625e38719b0db50208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163844 Malicious code in nudla-ofog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607a632ddf54b34ecb68eea529365a6cc715e2c8ad2ce45d6f2314cf1cc0fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160388 Malicious code in messi-urfait-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6416f099947270d1a54611600cdfb389556cdee7ade4fc5ad70ca78630aec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167701 Malicious code in teagood-namakai46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4aee81fa3c0feb6980d84d92512649ab3df8a783a49294dbc1b718a01294b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159194 Malicious code in makan-aigoamoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abea32302e1142058593ddda550633fc6df543c04a9eb2c3b81d576d15625f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9620d9b53b8bb31f932b6d5250e84da89aad7961b372a8c2799ab5133ee96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-afif-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd02ae622dd3c7c1c110ffa7683444a08ee759876579f127162dc2c572f4472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c6ebd5988ab6ef44dfea92039647660beeee9d029d095c84a51a4e5b0bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20bc84703c8023a6a14b802a969749335cdf6cf7defbff1346f5422d0a4cbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe139cf17c1b54defe2cc22b0de9f57b9dc981480ff1d5d612d15b23a4f2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nakio-upsidaaiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c52128295a37fc5e207b93b0ce4e2007d36069aa9a93896b728b5daa1434ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503486347f606f86ed470cb398bd754df2714fbf2011cc7bc9167cfca61c3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec50e4fd9b23448dec04bd3a2ca00191dd21a48ab527108b004dca21be548bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55727be591444bbdf1b8f6d1fcbd7a6d4d60375f029fde78acb85bca428abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a6b7535e78002ba2b791033ff294dd6d120d115d7a36ce7a2b40603d3c489c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/miasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045904585d2da9c118a652a5b3eaaff12232d5485036441291887f7886a6a48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutsr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd596fd3da9d27f02b293db67b4253631eafdeb8edd106bc8b0b42fdfcc2d8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...