MAL-2025-155983 Malicious code in ican-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46388f1ba1ed241a41c449d760c8dbac3c945ec4b27604fe839c38aef819aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164508 Malicious code in prayoga-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b83de3959c49377ec0b8c39cc79d6591e8d0bb79936fc5b80921fabe386238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166935 Malicious code in teagood-lokika68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c26623a05b187e12271c9fad043a0f5b9d5c478af956b8a87bf1d5996ccbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157026 Malicious code in jele-hentai-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1253f07ac83cdc4c158a5af423cfcb2f0fb79547a9cdced334747b564703ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaac02fa7694dc286458195420afc77eb7b2e0918744bda3c37c8c744ce0d1b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufai-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcba99a57075217a17ce97b2d94d88bc9aefa3e4f93fcee820d27848c094023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831028648104e2ba1ed802f61966c716d99556ed13dacd08c71535dbc395e999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb78ea8a09b2c922cb5bdc7b92e40193be19b290c5bdd626ebad1223d461176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5993d5b022fd93f21983557c73e48ae0ecce98091d5e53edeef929c98c311a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2616104a2d616322af4fc0d59d43cb03cc7122ff540b7d69e41e9e207da6c67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea502cc1c9529f9fc0ceeb9d424aa8678287eca1fad23668535b2a90836b262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofoi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39500c8596f3f141a7e7dd38e551e5f8a61eed4ab6b226f881768b41856360f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dda2bac454433130dedbec860869256e13c53a700c798976c0a1c11edb3c487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d67cdb44c08699dc5a94ac062eb834a1f2efdc1039950ac93c8b61f6f991ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577c2e9b67ef9c0001221f667b7e43a7876ec5c38a2f1bdcad22a3814cccd5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2042eb61ee7aa02bbd3ebe078213ee770defaca5a57f73457be7d7c195bb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7fdd4e01cb42157e0a0b5b0cb2f05181fdbb3bcccb059bef171709dcc42980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-muiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311f726ad817805ac5cbe8657a64fa5802fb981a98d00f980b575bbb5af2f693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b59eba378baca6c9929fde84f0cf7adf24aba824916e507b74c0a6c9246e341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibiuk-itaruknyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905f40329ede985a7cd64b5f5e0bc460c895c110d1aa415b013e74a376631af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...