MAL-2025-175539 Malicious code in koko-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37a108cf276880cdc128507e3f458096cb570a67cedcd6ee48a2fa6b61ec119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nusadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ab28daa8137622cc76bbf2bfa03a98209c101b1984f0fe2b6c69d7fa40c93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terui-umuaraa1-miti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778776993e81f4d86306ffb604830830841e5749f093d918ae618531f0da8b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177145 Malicious code in nuyar-da-rofdaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3043f3d8e332db623baf44067a680a7cac2c8e9d9ed40b1d061b0d2a43e892a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0dcdf7b979ac21945138232f5c2fb7f4dcb01f2355aebc3a42c08f0221d577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174532 Malicious code in hakim-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2381d00a7117cc3142bbe724c53b4998461f9de697ecc036a3080d60dbe3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172423 Malicious code in heres-matinula-uinayami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc310e54ac61df21a54759517df5dddb3ce63f860d60fed5f016a1f6769ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172614 Malicious code in verts-otio-nahgiagfigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb0e883db54a61bcf6e222b12feeb5454d58e3f815a7b01f99fcdf57f1bdca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devendrasingh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01041e34a4d87960739b20f0a7b30491aaf24837f0386ee7e2fa11b05804c50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171546 Malicious code in marcelosantos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca267c3424e4995aa4ff3c8a767e1c3afc05d6d476603f69393ebf5c4441392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960273f881c41ab1fe698040d09512c024df6788f0fb300c78eb4682bd85823b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdec47942174cf618e9d97263be9af576d44a92c96a39fd0e21c7cfcc2dd184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d28a0238fe7931e5837988ee95993bedcea50c7223bde234a9def0ccef22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8ff8944d0654ccb9aa2d37cc0fcc4330b1fbecad874fe7254950b7ca93fab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165510 Malicious code in sabudaa-muyua-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a06101f3624cb77b79b08e940ff93107150343ffec13411ce0e4271f30d3e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158206 Malicious code in lintang-tea46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e12f3b127ecf9e1ec67892ed2cc2ddf99acbecb57a3050f59cec0769db01485b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156227 Malicious code in ilang-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1bd90f39b3cea9a752333f705a8bfbb3cddda6d884712bf53c4594a939f8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157512 Malicious code in kentung-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313dc870bbcc127da90f60c40c356d8b6328e80fde07d2c421b6a78303f8e501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168603 Malicious code in tealove-okta26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22507ca2a099a7afdd0f0130e8ce706af0a2ca5176dd2555052292091bf3f3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159459 Malicious code in manadsi-sfdada-mivafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c946008fa3bf62ee73688b02dd0168f88d8d8bb87564f45781499899605cd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...