MAL-2025-156449 Malicious code in inal-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f20eca48cb9196eb52a80099e89b65173e1a3e584643af7fb9c332d785a725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168222 Malicious code in tealove-dana17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51da80787eb91af010926bc3aadbff0af2cc2362f17e978b148d260842970fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/arh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52caaa733dc76e98d3ba15c6f5f515d89ff82c1649ab3c28a50c113b8281285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832f3db1baf0881008378253723d32b7eaeb1611acba1c11577e458f614e08c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-namuada-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f95e045a147026327b35c18606a4da1115711c663e2a0df790c4832d93ce6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167241 Malicious code in teagood-nakama73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a19a0b4e9ef8252e176258cf40e263f0659c2d0b0cdb2dadbd7759d0cda1bcac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155501 Malicious code in guras-visa-teajawan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83eb0d21d1cc60142d96268aea7128343473266c1c0759e0883f2e6099383200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bafabd9984eb52ee24502fd990abc9ee52d2aceef5a24ce79046c8cd660c744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-sayl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc1ab4de257e781e6222e194ab12410352184d783d6cbdcc4f2d299841023e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158374 Malicious code in lookingan-nakomi17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291be0ddc8f28c64952f15c082f29db949a23a97abe94dab828ca0f32e5ae887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165959 Malicious code in siregar-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efe482e5ea1ca01a0b2ce6fde706f4e4006910fe605de410cea9661227dc70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169107 Malicious code in tehnah-nastaia-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c751feb1c37f1166e33fb3623d2106fa8c78b9527f296d9b360d1c178e0c98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164911 Malicious code in rita-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236b44429a25e62402931c0e0bd6e567a54268fee3806e469b192e1b1841eb70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160327 Malicious code in messi-jdga-ssdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272c6d3b0f51aae4dda32fd80f5fe9345132283911b70d9ba23fa12af3e9d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafgaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977f87c0d2eada0cda2510bd3b004f9af64d3078a3221710d9be1378bd43a9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05db3e5db34bb31aa99c83e527456a13bfd956f251e1dc191d1cefc69a1f1cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminasah-afiigafmgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a23ce4385501cccf63d949b85339e9d56e56232b6f9370cf69d0673c0ed3fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-andapakati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f929ee603da6368aa1875a85b6034178716fa1d6083d6710adcc1b69ac724fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2183b871f2f9d62ed2e4b15e906231f4405960819aca306b96684c5409bd3574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a9a7fe47fe1520754a5eca1a623ab97e6b8b1713d952884ceed03fb1be724b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...