MAL-2025-164013 Malicious code in parwo-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0808d4e2be4738c75a2dd269d13609eb09ac16a003b24767e21ca2f66b502dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165551 Malicious code in sabuodaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51900312c42e04e8b0a5cdabbb8e9c656e22597c7e763d93b0446badee5aecf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161198 Malicious code in na-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd71b0c92a64c87ffb47dac0dd7ef1300e9a4bd457725536cd386e9c23a9e73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158031 Malicious code in layla-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bf192347f5a0deb15cfc718fba696fda6ce7da226f743b262cc8d704195c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166980 Malicious code in teagood-lokina18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a4fc831dc28981c0b1ea8d67aa057e6c1cfbacb08517c6239e1eb9304bce67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154786 Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158966 Malicious code in madan-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff44d9b66775314262e78a3bfe0a8e7b70ef19d430e40e903862c54a7ce4efb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munisdr-naserf-misn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be046a3a4128d8d3093aff600ff73644cee30510897063d91503dc8720d827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rassdasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5eef8632f09906fce790960af278af350ce5eea42a2c9ce9bf9655737394cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-ddreta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2703723244576dd2a8d8388b76a036780a35688f4bed13b6273b3d3f067c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otiganagaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a09752005e8e96cba3d643a6688559e14da88ba64ead2db534c806c33ad982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4790a4e6b092928c158baf7df4bce004c32b97ebf7c7fea76e161a9719f9c243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-fissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8288fc10211cdaaa10dfa5cb4c752ff9c21c868825cd75334c15cc536281fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e611cce22e477277f5edff9f28b50559d1f89f7e736fe1ea33cb93957095b31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153002 Malicious code in avh-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bcbeb5eeac2a16e068b0de60de526fe8e3454784143027d41493cf0da8c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168642 Malicious code in tealove-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdf1542e5e0afe5c49e170d9bcd5272a4d8bf44a12d34c33ad1e0557928dfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166893 Malicious code in teagood-lokika3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5402a31f43749e5a58c03435ba96cabff81c124ae24543cef3a8c8f9fc874ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169285 Malicious code in trevora-cir86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5541255bc73f90fc43cccc57335d2a31f3ff22f796c5d16ba09839492d6051f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150982 Malicious code in @miptaa02/tod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd5a6837cb2137e339f1542f1de0166a81cfd4a4770f4dafdc20fa20e0d0752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157079 Malicious code in jimmy-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b6731ad2298c3890eef9a64e9695aeaf840517c45ebfb279d44820293552ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...