MAL-2025-165176 Malicious code in riyanto-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480157f9876015dc53a0a62e2db9468bf7817a6f902680429c9111cb5c506718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158624 Malicious code in lookingan-namakita16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b266ae854bfc430b8cf09f8fc13d322842d90a056ccb5c73f662e0840b319c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150759 Malicious code in @miptaa02/isaqeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a022beb203b84be9c744de80a4aaee9bc8e2a04d64b98fcc8387f1c76d6f6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-korea1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8acbb36ce7ac3fa20d31edd6c3ee48daabd87abd979f0e43061e4712fe465c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd95e0c2a71b40ecc2a65c34bc9cd71455c4e4b5ad60c5130b0f297f252a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-loiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d1b9c22c781a72b2bb991cb5bd77812d4d1089e59f847c78dcc79e4a6d81a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranfu-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928c767fb089b7752f392c35f9c0f7cbb7cfde5fec224acad074ed76390d2b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-dgds-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969c958c342079f989e9df08cafb4212025ff4b1b18ebfb269b169d260a676f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164954 Malicious code in rita-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d095884c539343405bac5b43c4536f3f8ee133cf5d172d933bd8818b48ccf9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154458 Malicious code in diago-kuli-luui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c94a6475921c6a82fe49028c914a033a2f9f551dcb947a1812843cfac9c1166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163520 Malicious code in nokire-zabuza31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d982f32abc3c08d8a3d4bda7bb31d6a8a6570ad33715e005a92adde77f6a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161588 Malicious code in nabuf-otoiman-igamoigaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43e1df098089bb3bacb65fd26f85c34723d4ed07e90fad048d16d12889dd4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161410 Malicious code in nabuf-otgigaf-dofajggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617432e437415b6df8f802657fb6da9722975f4769d57fb516a62162470054cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151362 Malicious code in abina-amogoi-anuhuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e06943940963ebb199e31de269d6d2b0eb50ba4782003937bd563667282579c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164233 Malicious code in piluka-aluni-ipibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea438574b260f2af248b4cadc118d19e8938142ff1ab15a6e2796d148813aaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168453 Malicious code in tealove-nanami24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3aa7c104a7b58d0fe556cad27f16c5f6cb67d84a453bca407f828beec2a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165710 Malicious code in samehada-fzhs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9093451aabb3195bc16518c3f0db592c64d580f87f570e09938cc3f768d0a937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54e29bd50fd992bdcf158cd9878b8583662cbe838a82c69a918ca14aceffd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3419c98d899c4be48c51231c3b5fada0618d461ec538d3cb61522c169bfa2cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...