MAL-2025-161300 Malicious code in nabila-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b48eb66c530d3a343b32259cda331d63c31c6cee74ab201fa79338030b98d56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153416 Malicious code in avminh-afi-famaauog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab5a2f881d45de9c0ee806713d194759389c78c2958c4b4d3cfcdfcb1e9a114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151401 Malicious code in abina-amugui-anucuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfb2d713c1bc3cb6b3a042aa7abfb2bf57d1e690ae5174282b20724120d1141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163246 Malicious code in nokire-nana88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba09ea77b611d5ecfb61d0bd990afe23f5d469045ea31d4a9c0a4c97bb712c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157714 Malicious code in kuinsu-lki-kopanatiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b710ab145436a65c97eb0f3cec67a44aa17e0a63bab263555b28036a99c975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166580 Malicious code in syahlan-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcff5c39fdfc621e27cce56dedc299b2674d02d7083c8343db74624eb4058a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166638 Malicious code in syahmuda-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05666dc509f0d9a0355bb0cea95db2d238896230acd3b7dcd7d96228c837983e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170556 Malicious code in wulan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2747c75eb82160d4a58aa0c1b010aaf8dd7d9ce3b4a594760c4a81d20dfa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08016cfcdd71ec3c735a61489ae2052d7a3b558257d08deb88e41e96c16ceef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tedda-tauas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa68019ec33d0d49cacc0d267dbf0fe46ca5c97c30b653889ea3000f8d803516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e1125c617f177ba76cb760b376872426e6bbef752dcb1ce3649fce4d64e7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madri-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbe6bdbc961876685f05176c53466df1eb16ec1c332dd7653d3d9e6bbdeb628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd9fd2ded300a84645abef264786296780f0667271ccd13205e312bf1eeaa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fb809b4793aa087e08c279bca8aca8e098b35265912ec35a96525daeaea7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d753304d6292f59cfdcf26fe6671134c9e5579915bb4072f8016415b133010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uywu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c899a705138c6bdde90faff3fe9df314faa1b3131226298bf4fe503f71eba6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d95580a2f595dac524d828c8b55ddf9df9f3086e2aec84367877bb18fdc81e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fd9c9beb93a2f0241b2d372e78acba16bf2e0be4bcfe68c75211bb456359f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4f9113a69d48c0dcd4676d72b042061f2c213b20f618c0c8f9e3c653207537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...