MAL-2025-151519 Malicious code in abu-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e436f4527a8d4ba287d74e82f20eb8666090b0ecb669d1fb4829f57ad457c555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169045 Malicious code in tehah-nuty-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c52bae30aac38d6c372bae645b44b6aaa0d1d12443b1519e9ca66da1ec37ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155479 Malicious code in guras-visa-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0576f29ea917311e29d2c7940a973b75666e33de95c90f8c5a63d9f7c785213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuok-inukuilo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737b054f08e0939842d6bb736c74d0389c44d37b84e920ca9ed6b994995fa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05ae6bd7f1690ad37e3d227eb05d723392e8209016301328de61957a463256c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c05a7b56d50932ea5b5626014fd11908520bd6857e1634895109a4c261a26cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa03be830274a58751bccf94f1d22dd89bbe9c2e8642c3944e7749c51443b90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-daana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076ec4caa6fc522143ef83b5756b2aa0c492941f9b396ff1cb05ee9be2a5ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a99d037357f69cc58bb9d2cbec3541ea53ac082c8e1b640e4f9cab4bca744d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uufp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd134fb91f8ae30e9a2798f056fc39c7b6572284c115bf5b71faad8498fba2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2918af7783f96ef3084b10a0de12bfc8679fb9e7378e958f94fa27b47c83e35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901c2aa106f68b208e7602b4c4d8acdcc697132fb8e76dcdc1f3877f17ff8d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbec3e9e363edf830cff77f8b0fe40340aa7e6d8c97884519f109ec0e80f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aizzsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff5d4d8cc006e51197c74b6aa162927de9741ceaa294d237f2fb8c57d934e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313be07f84dbff34325114d7c1b44193635f8ce7cf4a6596fff3e467fba2ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avimun-abup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09de1d1edd61a2999279537facaa038aa4d956b2036b1bcc0b812f17a497aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160861 Malicious code in munidr-nerf-minsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cad8e4d2b707a77cfc5408e3a148db5e70482aae82dc5055da39fe23a1ee189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dd5f585b8e286d947e458fe4b771e06b093b6a6a252a51f7796f0347d4bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...