MAL-2025-162606 Malicious code in nokire-kilua2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46df2e7807350e98b3ec7732aad6cde656286a50bd109faaf1492abc2ba08cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/p51r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c85876034d6a36860db50a097c9e669e4fca4a75bd2a3983e892c6149a9914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lki-kopanaiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd2ac60ae01ba287554c96f8274350325c4cdb518f289287f1eae392096651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151527 Malicious code in abu-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aead1621fc8e3ccffab57042fd99aed2032bf426d7f8d904494b733d5c33de73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170334 Malicious code in verify-aya-auil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd7d74641ffa7260182cbcb9386f31611c4859cfe496916ed98ed0b117971f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4ad276c5dd4720a6e62afae524993bf8a1bacaeef2106dc605587704ccad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165147 Malicious code in riyanto-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199ef657d1a64886457d29f755f4d68de662bb665641b13742ea531693256b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156849 Malicious code in iqbal-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275c517be61433fb5b93a8548bdac83bb7985d2f71572bd12dacf0cb3a07bc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ff4396a63cb285bcd0b848a63e178db17af12fecc1a1cae51059f5865ca1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169040 Malicious code in tehah-nutay-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec958b1cf5769815eb35cfd99ffdca505756cfdfd12df7c2bf2820edf05bf941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164874 Malicious code in rinto-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051df76847c08bf2ef35615d57f94a13fe1474baa4c281e664c359917253c0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158729 Malicious code in lookingan-namala2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe2137c40d972ef2176852d37fc6097b2d67f148cfb8c222e61f3d731c6d7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otatu-umi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3083a47f6c49af4f00396ddccf05ba1adffcc400e88f529d85d71fcbae842d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170462 Malicious code in verify-tactiva-mechan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4328c65d85b9c1aa2f620c358ef6bc3dc6df5cd00ec6ed07ebb529695d6194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4490ba440d4bbe8b9a12addbd87350faac1644b16e7e322482c12bfc04d702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70532487070f2a0deee8b4bbc1c74cc67b053870890a96f56fc6f6daf60b7e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91c16cd439b4359c36e0a4ad6e526260fa463e518c7d94ab12f165b345aee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f02ab7da63f5889f752cef7b7b74562df3711784538bd99b8b7dc2d9966949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155924 Malicious code in ican-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d811f3956719ef82ef96052d62181c557e0dfe373f49b4ee0da3cc0d6f741bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158220 Malicious code in lintang-tea59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40cf462e23df142d4f8877909e5cb504db2630ba22221f0ad6c70268546ac14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...