MAL-2025-161302 Malicious code in nabila-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e35bce9fc8b60ce393dd1cabaf60586954736b621e69cbc37ea6f4c918a4f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164992 Malicious code in rival-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a53ba3ecadb935d8b46975475c9c67e1efea981a035d86532a2d7d77a7a541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160216 Malicious code in matane-co-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d6a9164fe6db67415759f5837d923911cd8cf5aafbece186d06511d9fafe0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0349a473eb091889b1fa4767a13e6a5841451e9c484268f50707cc8eb0cb82e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161797 Malicious code in namae-nadugsua-midtoskia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac8a556f64c06c764287b047c4573d16ed3a4eca7ee5f70b7bed00cfdffadd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157595 Malicious code in keyla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da1ee1efd3f07f4b55aeb23b12c9ce56de676d4bd86c2f77b0d0d4761d88fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162183 Malicious code in nokire-abimanyu67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc67313d970bc0f2459076fddb65adba8250572ca4c855e159845abff20973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tsfdaa-ta14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7616941589122a1dd5ef798cfe408fe76e5d6cda257524522f53ad59fc6964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimoi-aiokaamaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20264f34faf34b4002e24b5d9d133bcf13c1750587673c4bc951940feca231de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/slv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571041fae47cb37a94f3b38228a76e1e6a9b3e46ffd0b2074b00334dd5bb5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8abb09d3373fba90bab70d3a8776d3a47d5c5a25607317473bcb1d8cea98fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154551 Malicious code in dian-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc09701127c318e88b09100a2c7e4af648c20bbaf2eb9183b7fac09a499287cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165278 Malicious code in ruji-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fbcee6886c357ed9345d861434babe69ec1b5d23a4456d4e1c1e194bb73df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153791 Malicious code in bintang-tea41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a681a5d31ce2cbf9c9cfecd4c65b7b8c5a2efa3cd32eb2286087cee958cbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156487 Malicious code in inal-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5793b09edeac8653710851f09a0dccfff15e94b36c583f237fb54a058aec0b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-aul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b04a85e4e1d88d16f0cb54594b39854a0cc1780616e7d2ee8ffa37e99b25ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37ac08e129c9b44df8a3de1b2cd340dada43158334be6c56f67f3c3b6c8d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhoupaia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478ce697d131189faddc7503cbee91c4fd1010c8b04d4fc24352d9b52ff1f4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-miop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f335b0144bf4709a0c6e6e120d73ec946673d0101ba52610dcc0f9ccc4539f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-namuda-miopd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ae08edf8521a183bb24f1d063e360a3c8f786c77ab0854695e469ee9800787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...