MAL-2025-165940 Malicious code in siregar-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00b6fab8ffd51dcad76c1833935c77ec76e123bf1dfe42c4be83841549cce56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170149 Malicious code in upilka-luzimub-ilnui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e07ec1b4152f0574f80f144dcc48ae7a04218930ec6e1cf1bcada5dd9bd4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166334 Malicious code in sunden-dibuok-inukuilo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737b054f08e0939842d6bb736c74d0389c44d37b84e920ca9ed6b994995fa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157899 Malicious code in kupai-lulikoniuta-igugkfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ceb40d97ccf809cc364fe1a3fd35eb9c572c928de4c4302e9c2d77b8aca5ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152892 Malicious code in astia-al12f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf908ff7733e8927e6c6ece721fb106d4e3398c7149fd6de6b3ddce8b18f599c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163457 Malicious code in nokire-sekiya65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485bce6e4c5c24c1aa06f1a096743c8a0993683191907614e851437b875707a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163851 Malicious code in nudla-ofogiafaf-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7aa607806d8db043282509363a2a082ca5d699776bb9de27add20e12e40832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157123 Malicious code in juris-qeupss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9655f219ca2fbbe34419f1a39682833576b4ba61d4fc20adbbde7325adff30d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164517 Malicious code in prayoga-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4506dc5d533fe33ea265fc675205b332b2adac8ce06dba712230dc653fb0719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155618 Malicious code in hafiz-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f4f18555df6682033329361d88ba4fbb5c5776ec0dd3ee70d77e25380c12e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157616 Malicious code in keyla-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2818237cfad3028f877aa2034798a8b02124617b9a8fc51bc7ce16c63a70435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162425 Malicious code in nokire-arjuna15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd80527f5a049108728fd8205dc822f0a350929652ecc698bb1e41faa7726df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sisupf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba30f1bfb0165deab35ba48d6658ed296d2cfe2ca1d40e35180f3d502f133987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533432ef816e86b90f13da5e5a9ac25e285d4c73f2ae38fcb67b3ce666ade83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ertacssau-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fa872796c351cfa6f3ac0f8e1f3ac4f08141ad4e6d32f4e0f943a30d2fc2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af51ce55571093383fdfd4fafd75c12cecb03c33b9cc550b734f33baa853448e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d7f382114755ca4b33bfaa344e4f53732d2924c3ef7a292de8cef0a946a348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuok-inuikinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fc0556c692ca78f6a3b0e91b348f6259aada53755fd223d6f7cae9bbd199ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc53eeb3541bbe01e69960ae41bd263b3387cdf407a945b51ac80007216f1cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alin-tubinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df6fc1b194768c2a69f82068ac1464c2a5b7ebdeebad94ba3e317a6a54e33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...