MAL-2025-169671 Malicious code in ucok-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a0ef3a478b383b11f45744f9575e3dbfcd4018cfaa63ddad6d8e37645bae3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-tban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2152fe256239dd91481adaeb093ffa7fd5f0a84a6d2d96d22c9156085c308a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160057 Malicious code in manurung-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d892bf0d6062251938a00dc10a17b676fdbf6d08843b02b71cc7f852616d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7a7b8b44367473ff913e824ef2f3cf093a13329d8907a630d5ca9775882646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcd5caec6381b09a9a616a302bd3af7e582fa2885cbc4af4f9dc1da7e1acaec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158386 Malicious code in lookingan-nakomi28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640eb5d4b6898355e5cc4809ecbd0d287ac86795b0ccc29212786429d3e389d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufani-muyu-bagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac03e98c7a270fd6ad78c9811cb8edb707ae54b58e8eb22433ab952561aafce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/miwsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327b5a07878b4693aeed6abcb61b28ee1e7d155cc94c65891aa7b1a87d662e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sifafagima-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438b737e6bee963682eb27a0f0d089198590e5425d2e39600a354420d5c9282f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uiu-vilumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12594e312ecb411be66ee0c5bb38c15f9d9a3a88260b8c24d9edd5cc47219a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e7fa3739643c8fa658bcfbb702a555b6803a2088afcc34929c6056a0ff30d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6e05da7515e648d113c624569277cd1bc98f3cabbbfbb0a8b87855bd06318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166742 Malicious code in teaa-reborn45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade9a2462d6614c264001b9ca00e1a7e4fd8206a33e5003b7fe80ad702fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d37f7e808414741f888b12f6d66c93f27a61b29dfa038409cdac64d251a0cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jiss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6683079957b8081b4e94f912fcd4b8fe6bc570d15639ee6c219965e837956828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b121246ee29e04986c2cbe6579a0483e79d834ef17d70764bdf005e7030a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatfa-buaat-nagast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3c44e3fd43b339915ec1029186805906b13a44c74cadcc597ae30314af60c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150347 Malicious code in @mipta19/asd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884f85f8d5b38989632c1670b940511c05f4c7dd3549529abf6f723459e06c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155905 Malicious code in ican-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd1fbac139321874e4e030a06b491d0d7d6fb462af924c4785016580837dc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke143 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7cb03826a3479ebe97cd861a6173119e3679e30e773e2e78070bd7e7871c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...