MAL-2025-156262 Malicious code in ilop-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa471e5a54a351be2f9471640d90aafeb53d317765227fad51573989f840e342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f51bad97e8091d00260edd6e83b458ba12d7efa26c9111587267cc0a5a141e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nanagai-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35da831865283f8d7a5569504f4b4c84f193d66387cce3f9a77d98d6ef223115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuoa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c29a9317a4eff52ec30e97f2aa5ac8297f706b5c766605049d146b14e22d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab34cd176788e365a3a652d0944bbab4691a6c00c67da665229685b2d330eec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166805 Malicious code in teagood-cuekin4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fde3a62a44829389d4b4c7bad48449f9307ae2f5ce41ce22c05b2e64a2ecfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155737 Malicious code in hariyono-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42381bd719587a72c90d3d504885e03c3c0f216718a18ec930dfbe302b711b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165941 Malicious code in siregar-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d6c48db1f05e68a38c41356edcbf8ac0ec4aa604bbadf088fa28799d1968de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164393 Malicious code in polil-aku-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e28bb24505dfc4e6702eb5d85f67721d91d38dbb62436cde83596363fd69c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc65ae54958919ac7c3ac10371714a0e16b3b8ce06a9aa167219ab1543740ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155976 Malicious code in ican-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a86e7a2c282dc9515edf234de49eaead83cb7839222d0477290260dafb2d896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155776 Malicious code in hariyono-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc2a47de86708836999ebc60e46df1c02bc640a1c6f87f3c436fd41e3cfac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfaddia-maaida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d0966233fbbbdb143b742b349db21347617dbe7a385fdc564a4c6ef4bf9e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156030 Malicious code in icha-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4175cb59820d68fcaa8fbe49f43bae4ae630f154bbde4a1413a19eb8f5082b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150871 Malicious code in @miptaa02/ntia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934a11c2712b82b47e98a40d1545f803069e1f86e1a5e25fc2fe277ec7697b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162112 Malicious code in nokirane-asaiggfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb39025ff9e6bca3a57a5dfd4eec801d2b0b601a97e0715a76f44794649a90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-flare-galaxy-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf46e48e76d6587396a1177789bec4bdc75522c87f71b961f23e88989f9223e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-jabbah-elektra-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2feed5d5984cca695429759e5e8f913ea156640eefaa638a116b0017549eb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-callisto-hercules-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d99f24f56cb7e133b01201ecd9215855d54fc7a3fa3079ad2d1d61ff216ac59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...