MAL-2025-151332 Malicious code in abih-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72242ba0e7f0b91fbc5e875025b1e8aa3104d897aa68d3570502144354ab90e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159499 Malicious code in manaf-asi-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1108dc72a18f836527c46d752321a6dbd7e16667bdca22ceb54f19fd451c0643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152283 Malicious code in alfiansyah-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3412c31f38eb3f46261b1165f6c7b01c31fc18e4f743bb689380f483d58bdb64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157311 Malicious code in kamasada-nuatia-veasto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4729f9f50ff2110768b9a38af321476e31967b8b684f3c91ce847117649012e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155423 Malicious code in guras-nutra-asdaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49edc39c9c606e6b81f2a134d58d4e0045cf206ea5a9a82205bd22f70048f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164229 Malicious code in piluka-aln-ipibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce3b34ff4d1b4fae265774164f0827d527937e9de7523445f22d2c1fbec80e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156554 Malicious code in intan-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e024c7eeeb2642be2341ebd4aba2d74cd92437166c5f269bc46b02b10294ca45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuatia-veasotoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20fafa6bb0168be397d3cdfe02aeacf796c9663323a656d6f8d1d748c41e031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufai-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db584af0ccb3e9d4271f38f499ea1f7ce35d5604b9a64ab75862e05a1a61027c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/scseh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5fe4529b958763dfa618e1250e6c65ea053c25555882e67c812f1b5c14d969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b45dfb3dd215b5ad8138b3da80bdf5caab776a01357538475fe6d8a28def65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusamaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cbc5d642934f55ec9f7ce197036c77f8c69c3248acc49f54ab9b80e62166c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e75ecd741c00e854bafc9522d9cd5ed6a5a2f6664fcd571136fad96c852bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557c10ae595e7679943799aea7b48b3a55248c02be7a13ed3bb885a26c4d9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e121d55322236c9ba1379ac1696ad69e1e17409ff4f2dffb72125fda72f9f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8882f99c22d3e64007da5d235dcb77a55768ee0d516f65167be87148b85a471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-mide-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a2e3f8b7705a3bc5f1b675ab3abb1d10d6a39a5d37b374040885527f55b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/srsasdys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606d89e2dcfe0212099b61c396bccfd6f6610dd3fd0c475a29189f89f00e3ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-klp-aksaubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bdeda9dc7903ec9825128a1e6357c6f07740359b98071dbcd098d4ed80e7f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02ef2ba1b9c3da24a38eba0f14630ae73998b35f08b88554e9587c81c3cdb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...