MAL-2025-152388 Malicious code in alita-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e93832c91a73192a8a54641c3ea9a929e917a2ebbd10c53659d12334b61c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279f50467e34d94aff03ab5fffb7ff88800e984d7ee05970cd9497a2f452de4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatf-buaat-nagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ed9acb9bd6126969a0032ea6de3c3758973b89d5c4ea2dd6afcdd3f48eb9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaais-ifaffofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0023551169380428bbd5feb40c3479aa902c210efa3c41181fb6c896b322f0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6242143e3062e90a955f4c7c5b61d62bf8cf097ba88ef1e72383b42fa6cc977d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamli-luqak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98251c9b916c371b028cb044a99c6b7522fc23495216bbc80d07a4afe8556615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168215 Malicious code in tealove-dana10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb15e2de0dded4a526607a38900bfa3ca603d932153e155516b48a2934cd5cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-males-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61c7a02e88985dccb422b986925375aff9a99cb4d55da57ec5331042c0d86ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151193 Malicious code in aben-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae73fadf1b60767360ce3e0ca7bf703d60d984d0e03b83ce1a16ac79752c3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170448 Malicious code in verify-tac-mehncal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26fc8ff838cae49f97343fd64974703c99e782425aa4481fd80922b7cd5b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiraifne-asa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b730e605b3c0d466f0b5e0e086780a7231b7e1497adf279ba27cb04d517be578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160958 Malicious code in muny-bopaha-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f038b0a9a68090938b044246cceefbb1cd089dcd8141a905ab45e7c2608871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154641 Malicious code in digo-kaimoi-aiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99588ee5bae34e350e31c30f547eff72ffc9325001fe19ed53a5a8ecad8d0999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyag-dafuhmaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b905eaf22e9a2500807704012813e08a2c88c625e12ee50f854a3f0a09e14b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6b1e724463960e2eae8ebd02a25b5d6b9ffa0a234d24eb7636434a05e711c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3f4d9edabc7cfffe1240a92c0717fbf719e22d5e72a8d6dae5acb0b316a195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b1a04d39a675e77c373285f78ec90d51138a8a11ab562a30ad646c772d80e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169365 Malicious code in tusaaya-0-r2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40d0136bde8975613a19af834aeaf245e328860846f08d6624ee0d58ee29cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f726776c700fb192d3c1203a3662c0a7902040d0f394f71971792fe06480f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151961 Malicious code in aibopuna-mobile-araoionbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04e0efadf40e9cca0bfa4044c91f626b7293b34e20a68887570be0e3f223ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...