MAL-2025-165163 Malicious code in riyanto-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8015d2482597dd1d5f548389a984b095b3081dd5568dbca8be006b8e1c01b316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153215 Malicious code in avminah-fagmdas-dieogrga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd96816d19ca54ca25b50c9fe3327a9c2599f5b5b97a3ea10c232cea1c63f022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155919 Malicious code in ican-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedaab83d95904a4ab2c2689ada140fa5027d623630d6f20958cf3e08069cdb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168361 Malicious code in tealove-lady7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4858185fd534ef3b9c265abb401fd5bc85975d69628d3e9a75b696650e500a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173098b082c05ec1137682e21d9c809846b155be7c1dc01d866c8df32cb690be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a26b2e7ed34c6e2045ad0c2f5d97278a06af9f5f50399563000cd48ed1b3958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uufp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd134fb91f8ae30e9a2798f056fc39c7b6572284c115bf5b71faad8498fba2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tsu-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f62555020dc84bbb796f7da298d7b26a2c6c9fc205a9e1b01e0f09aa965f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158586 Malicious code in lookingan-namakiki72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c3ee70fef5fd9705797b1cac2c00821db0c28661ceb980f70cf398619b0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166173 Malicious code in suharta-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae16fe6ddfd78f289d36c40cd4eb60f154d70e5c55072e84f0dde7968634115c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154458 Malicious code in diago-kuli-luui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c94a6475921c6a82fe49028c914a033a2f9f551dcb947a1812843cfac9c1166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160742 Malicious code in muda-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19059fc2c4097d63531eae0373e42c85b5332956277bf0b492afeba328e4f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f106eba1591289b3e13d226bb88decc061214d569e84abc6fd5a67fc70cb1e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-nddsyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecce57d87cde3754844eeb0b489f83d9f15aea1dbf0ec0ec3e0a4e9fa46fae62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab960ca3aeedc2b2b2fa221be8b075fa8e8357718d7b3fa447ac18f14ecc7065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/g2enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd786ff1a3e5ba06c97c5c855d9efe606d3c85500fa6b086d2d3d6a1112bf9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152180 Malicious code in akanabi-aibia-ubau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f34328f810f3110d3f97a073bc0db3f75e856e9378a09d45d4073d6b4925c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154330 Malicious code in dia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86e1056c147236e6725d859239f714bc85003df1f9a63f9cb8bb1a4eedcebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165967 Malicious code in siregar-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3f543200123d69ec4385c195dd7a0bffc8aabbc0a98e3f1f62e07201e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166440 Malicious code in sunderlan-udk-vaukuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c6070325c17b104f35ca540ffb2399e2c2e0129f0de85f18671758ea66ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...