MAL-2025-164227 Malicious code in piluka-ali-ipibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bb433579ca4686d4feb5ad1ea3b8a7d9a22064120e9f99f36247339f486ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167701 Malicious code in teagood-namakai46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4aee81fa3c0feb6980d84d92512649ab3df8a783a49294dbc1b718a01294b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150401 Malicious code in @mipta19/pjr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafa1796ace032085f476c1ae3e98f82fe71ed466f2e989fd00fd0bfe44bc1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4657f82e2bdc28b1c435f9e56fa85d2e4513e59578d2910bb1d5bba4a3048bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162584 Malicious code in nokire-genji90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5f1ddf20856c832a6bdadd5c0aaeb9bbbcfc07aa289829ace6398b66109fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbc7baa427e0da1afd12cc3914ed675605df0bdb84d686bab189c18d8ef6421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152259 Malicious code in alfiansyah-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb82c6ce2b8f6d819f99acbf33db84a83508821cdc57a5c23351a935821b75c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155003 Malicious code in fatidra-faradda-nuydua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa3c1c1536ba40bd111240397df6a2cc9bf82f3263adda888896f3941ccbe7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd71abda1a4539f61164399e2a69b5ba885e654a45e58332bc509aab8fec80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167556 Malicious code in teagood-nalikoli145 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52578d3353fc77dab6558d907be58b76c868c977b8a1c03a6f0864cd4d4126b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167698 Malicious code in teagood-namakai43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4355700aeebe0aa7e7cf2728666cae6f795801b750a886f09f1f226361e791c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e256dc1b836bf2bd0fc43f971a504f8e82d0e4e5d815a40e1220cf0b3003f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad5e514a41404f3c7db19966df8b7d7dc83cdcc91a3246e5e96dac028c5a2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/olisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97c2e8e7885c9b1423b63627ced968592c3c4a739ea363a180b314c889fc8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a310861ad04921a32ac5bfd45bec205b18bc71861950a875637e27fa15f81322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9deeffc2f85b26a55a4b5bbcc928c4904bce711777b5392a6d28de6f1a81df0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a044b986abb447c5088d6da7b175b7a9c6a1895be8bbb057d7c8ccae0f3940e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c8cdf1fa881b779d1c2ad16fb9cacfa930677dc9e2b8b10d2db51395b47705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd77fdb2aaeac05ede70bcb749e3a3d76961739bfc53fc016e3a253ad1f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...