MAL-2025-152784 Malicious code in arif-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db57b5739b4d4de35b4ac69bbab350014d0d603192d30a6bbc53436937cc157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158412 Malicious code in lookingan-nakomi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f5699869d677ea81687e769c7b26e48549e940d76e2463fb93ef68c746eee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152623 Malicious code in analsia-akifai-asulan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f08b8be5d19b078da5da32abe515b281d5af494b3b8bdac3adb333418cf8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168164 Malicious code in tealove-coki1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f2165aa2c5a3abd122d1a542037c72e81a01d02ad22aad35a47e8be75b4032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160221 Malicious code in matane-cookik-ra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1522ef8aaa9aa526eb797cb65efc3ea786045a1a42534701f679f1cbbb7d46cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168577 Malicious code in tealove-nokire48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178231c2a2821d70f902b11df8715585e8ed616519e4b445639afddd7bd7bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168881 Malicious code in technical-alnbio-tolanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623f8c0545884b091c4203159bfa1525a620b27cff6b778bf4b7fcb0819f1f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163994 Malicious code in parwo-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b08b891c883dbcc34c13bbb610ba08b71ae4a5468e17ed6b9422128b2a6401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153446 Malicious code in avminh-afogofafafi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaec3665038b1a794a5c5320d0885467c8528f72e178e580d67cc8e1c41de24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150203 Malicious code in @mipta1/saraas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fd2bd38773cebedd07ca5271dfdaa2eddeca77201cb739d188d3910c05e90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b863728da9e2314382b8f4669265570868ebf7a959b76d946499b0a72e9aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rtamyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013897a464f991475d0de33a9e6787a066e7ec91fe9b5e44d45b8de8110b16a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4364d807ad2d6f1a81c874d5515d913bbc7d803eed3654c79bb7e94df3ba51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07dc6c3d079ae3846a29bcd72bd2db7d89bd86492b797e2dc843afe90f15d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5cc8bf760973c0feafa69fda20560c014923cd340cbe8c3ef6d7c90f97853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a955b813632b1cb3b6f31e857bf833cf81a59e351eb30e407ce86b2d2823133c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1069fa97ff0ebff41a8693247755604644aa1bf201117ec04e34396339d0a48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde909ff96d2f5afc6572d147da91e7b050d351e148db7e9d90b7080635942e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-sasa-t9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e2050febc595a12a920c98451b7b61cda279b1a61a64f259b8a9adb84a7a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224eef888fcf06a7e7e3a914d631a3c338b8488bce4997300a7ed47b3236e69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...