MAL-2025-152454 Malicious code in alvira-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d03f418e86779742e43fff3115cb200316626239a643d4773f03bfe30f8251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153084 Malicious code in avminah-fagias-dfigika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81458851c68c153f8a2b2d085ba584aaad4c1ff9f96a2851e53b9a398fd15b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162721 Malicious code in nokire-kore33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440050dda77716ea32919545c0f0ee6d4e0363c68324990814efd403a77df6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166805 Malicious code in teagood-cuekin4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fde3a62a44829389d4b4c7bad48449f9307ae2f5ce41ce22c05b2e64a2ecfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155776 Malicious code in hariyono-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc2a47de86708836999ebc60e46df1c02bc640a1c6f87f3c436fd41e3cfac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164662 Malicious code in rino-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a01864ac034202b556dc83ca45b43f890164f7f101de559a8d273ea44accb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tuddadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c292ae2323987b60b01a2f0fd020765a3eeddb0f4b236380fd926c061c31fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyia-ni-luyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f81cb103497aed7a2719e5779f59c495b80c7e5e42a3e70fcc671d619a6353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbc7d69ed0fd62918ff6a79f463ee0f399215bfd43736516902fd225b7d959e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimokafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daa82c7a183656958d01ee807c47b54ac03943c8d2ed9fd9f2024dfab7d8815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f51bad97e8091d00260edd6e83b458ba12d7efa26c9111587267cc0a5a141e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d671f890b923b00ac51dd4230d175617bc931dd47f713dd9ca2e3929f998bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in griossn-tyustu-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc35c478527f88967fe2cd7ea83b6304235b22cbe35feba8aaffb5ca0e1a4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-masako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e375f0616908f780419541428f23ec6af02a5c6c0ee4ed424f904c6dd34464f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135a3ec5dcb70fa10e9ec4e9685d719bc1676dcf3f37b52ed95a5da61f410bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02eec798a2f848a2412691dea05a0fc9ce7d40d2ab339af62a1c2e9226878652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c374262e94a45587159cea05ae61a49aee2661263cf16697840aad4f99defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c5ea0391b3a3d646a0db3702661d4c0298a7b811e35734670319b44357676e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfaddia-maaida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d0966233fbbbdb143b742b349db21347617dbe7a385fdc564a4c6ef4bf9e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-nurtasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dffc76fcee5291d4bceb903ce6da92cfa48e5eb6e08fada2a734b177aca341d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...