MAL-2025-156535 Malicious code in intan-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dfb500b56a443a8349b5c0f0226bf119b523a904d2a24410f2bff1d58e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157103 Malicious code in jimmy-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b38f76c71542b66142a48150b6e2a3c0a45953a373902b197e231d2eb1a10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157440 Malicious code in kapai-safoag0maa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b666e8209be2c52892d789f220cc28575c83a9c3c0e91455ecc2e7b2cb011b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170494 Malicious code in verify-tayic-alusakiliabamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff93df2a3139c9be938da3dcfc2475f83c6c739cae48e17fc566780d3d56764f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167689 Malicious code in teagood-namakai35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf7d00bc057d0ed175b41cf77793c0cea5b78e5ad8c08f62f19651950a6da51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150905 Malicious code in @miptaa02/rdtrdatj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b00b593b98c1f89c781850242e2439711a7685d11704adae6c100502354b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7d0a69793fb0b4f5c9ee290d1243f042b34e2e7a721ff0a8973407e0eba5f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3b90196ebe9a2598bf6e63fd5286f19a32192d97ff18b30220f4a0081f3aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-muni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84be4a0b3ae207066a1aa92751b70bb2965efe2bf4635d06faf8e27188ab7cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c771dcd6dce7eb3f7ad84fabfcbb45c3850b77c08542202328cdc3e0b6ff7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gafobi-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91d36a366ab2efd4616dedbd3d43a009df0e21bdf6eda905ce7c01e8af2caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca7b3068daad6d2d7fdff23cd0533f6c6341da7eefa94ecff3d6cd1c5e747f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2729e21cfaad0ad5623cfcb14f4a8305199f4e1d8e4a630c70cf538fa5dd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75717b3ea31fc90493215ace3a9ea8001b7bb9d5ef7c8930632af6c40385786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/savdfhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f707c993fa6f6be4f3cdfe52bfd1ba6e7bc6b9fac5ab4be062cc62e383d4c6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3caa51ec8967c92571709d3ad04caa377f9044538e481f75f5ac082100f4f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee9bd3aa2e1eff6a3a73654c5b3345d1e43fab7b0e201e15424abaf0440b25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-joalbikai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639c9c9e429faac8ff1322c3c59614ffca491c511154c49ca35762e5ebf6b63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704083e84127cc005bf97c0e36c99aee8c40133c913ff7259c0f2c45cb3bd578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5329916838c840c3bc93ee336c2db4e53bd559527b81d9e9d0a7e7c368a95204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...