MAL-2025-166012 Malicious code in slamet-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06595dbfe70901918961a56092ceaef6483a5e1fd988d50e5805dc9f27641efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167290 Malicious code in teagood-nakamala27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f9166bcc06273b78753b1b3a8ba28b7cca4c1f826ac0f5c94525c960709763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158444 Malicious code in lookingan-nalako35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b6d44c201af70a76c92d0d5482ad6f3b66f4f3cc4c20ad64546ee1290d864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cbef1eedde414c63b210be73593ac0735322e038e452f163787810ea7b4081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/axzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a655713e047e0aa88a53356cf02c1ac838417e0d9736ca0fd7fc4eb7d4be223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uikaynki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4885dcf5655342a53a46d661f9e3a1e01af2ba0518345ad37ac3726cb2bd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65285ed77c64cfec539c4692c2a98cf122affe7680738b7f77010e79d8c4b7b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3149813cd96c29ff7c811c175bd9034e12068a33ee8ede1d4b8526679b5d817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336c38856b9520350340dffc2132ed90f3ad2a0d2e24dccbfbd6ca56dfffca6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cfa30527b6f100bf5865aead3ee9470aa077ed22c1c2df6c21c6064f068108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-gofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2df12a07ec4934babfdb696d0d1c2f0c973be4918f455fa9dcfd788174e1671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dc8c07c3e05bc432b5172d7fc2c6b267cd91a4ced8e5ad90c22c16c7dd8ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdfd383b67beeeac637995a9a8122fc774b6ce257fba26f03a4ba8cf674ffb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3666b32df6eaa135de9d029a785d55f1af35fcdf28d8593ed44d191cf0a51668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-ali-ipib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875dba20a73593d47125520371c1dc48981c365160c0a5a4dbfa5e8a179514bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49426e1de3dedd19011a29cd37e78a5ff73bd5a9b4d6a56843c893450e7730e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-tight-straight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c913f2e6363e5bb8f9001baca018b1685b2693904bdb438356f76d7b509ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3786b8e00dfa16a908c2c5c3b57a5c3cbe02770e58fc0fb4d4f0e27c7e35d84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6468771d3c80ee6b1203965a96a69e021701b0e611390fe962c4fb12c9d3948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419091f657114f8d55ef452d7f746fcdc2ebeaabf2ce109291e717fc8503d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...