MAL-2025-155928 Malicious code in ican-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a228b403c9c2a712676492c5df8d1e14b9fbfa854c88ef2b8e0b0a18c150e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159457 Malicious code in manadsi-sfdada-miva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b1935a917b9c76fd35d338bd60607fc0c56f7654308fced334fc7ebba15b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6424d263f46ab61081f1d05ae33ea2d0012707e43e78d5bff11c1072690c29d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eb915230558258e1e43ff3fe8772e19e47b0c7ec082650447781f5a55d3c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93050c12c03fc6fdaa6764ebc80c8bb210cca9d753dfe81bbfbc96339fe98fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156952 Malicious code in ita-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4688caeb725ccf23f9f2f3d510df09d3772fffccd8887f0d40f1c7772c5b2a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168964 Malicious code in tehah-kalian-konto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84670606306bc61df0c630e703037ef90634e6d81247cc39ccf4b512669c0cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170466 Malicious code in verify-tactva-mechanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30970fad27188972c072bb092ea9c104e5dc2df941f8839adfc747a9e7ef69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153335 Malicious code in avminh-afai-foaaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf404dbe9e0a772e4fec6bc46e7b15cfb2161b598d3099f91062a0bb566a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169100 Malicious code in tehnah-mangh-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81b93649915a20118b60f72c7f9fe82feb84df0aa887085cb8bae9a333a117b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162612 Malicious code in nokire-kilua25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0caf0e5601d912a1af8f9a816436ce7d612534ffa0f05b60e3b3b2b2ede7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpie-ara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647c864f1f82cd51c7470b584accad4c75c663420770d8dca5fcce181a79e278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151623 Malicious code in abuni-nikaia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa50858d7a2ff9fe0ba9fe0c62ea4f49d343c4c7415a312b4a6308394e6d0f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf6de5bf150660b3159dc549fd9f6263dc5007ae76e6a688637106478dfa72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160016 Malicious code in manuk-nanagai-iafugbnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a7472fa71c2f12fae7cf2475bb40b1e07e44c2ec43bff10898ab1eb8423687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169545 Malicious code in uaragifa-mar-saft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765f102b8accf2296b6d7aa8b49c97215e7c1111f7f8293aa1d134aac0dd269a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-unisakiaoiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48020e87692171029812c7ca817ed98564e69a7ea8960f78dfa102d7a6166437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulipo-lukafmaahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6ad4fa3955df67179bb2ff6564ed6515384192e67d8a690cb27e0e1086897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32532abb75660d8c8ae412f7f355080c78f275c60b7a86e13759be44bd963599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00da411c8dea33eadfb6324d81612ddb9273f2494c582a3b590fb72a78edf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...