MAL-2025-157024 Malicious code in jeep-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8d5fe737ce7b279f58ba61421c24627800fca366f7b48d4e8d1ff134d12134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150768 Malicious code in @miptaa02/ivah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1fb6b26dbb0dcba4ad7c0a5786e44432b1fc038ef9239f9003f331bd4ed10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kali-nulivaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01e14ad06b696f56de0a05079970a3641314d1ae21b86be34d7af90280b12ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6778424babc1bd85df40603bd67f773ca2ad0a24a29f71dbf6ea8c2f1ccfb88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaior-dareena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32912fc75e40e2e66c1cd5010da4a63703e7d4df2c03b411be6bdab9428cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-madan-syahmud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffa7f9a191887d4069b7670f51e376e8f3245b84e8751335f7ee8f604513141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea-oss-mirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f31505d055428a0a5643fc7e4b771112fd0ef022c9ba9dc2529c6e06dcb4f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5267e34d98d72fcd074d1058c8c244ac5c95104765b56965b8094b9ec8f9988c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c657c576148dee0a6b1c5bf61abe7c11bafb38a4aa5fca56f6e865ac77172028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c8c501ae669cd0e20ce34d604052a00ff1a11ecfa298dbcb585c666795569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606240b216754863ae5967b2d967f99c1fb259c9b828afc7debe6dbaa1045c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30722253dedabfee74af1802794fc23f948bdb734e76d3c2a25ff166dbbca15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfb373df37bafad32f1a60574feaab3c2385273ee7c9e2e9646cbed8b9cda82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159868 Malicious code in mansila-toafgvila-madasazhfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118933b613d5194a2513fbeb2d8f9a522e84c67821e1933ae172624a285b4300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152091 Malicious code in aji-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe0c92514afb35fbd476a1bdb655e5d7cb53b154f425f379bb9737285fb6b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agomi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b79ddccebf628aa517032eb2420ce52f383682d928cea66e2e4b9ab48069aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157046 Malicious code in jelek-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae8a767afc524d740d61440f09d2af34aa5ab0e0e83e55dfe2f679dab0b9079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nanagai-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35da831865283f8d7a5569504f4b4c84f193d66387cce3f9a77d98d6ef223115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4387cf88999ac9f68e487ef8a5b7690d6dd1282e7cdc954a518ca50c546b8ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...