MAL-2025-170475 Malicious code in verify-taic-alusakilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3883388262c42d0675f2402103d6960cb19e9c36c7603df8eea33f6fd8daa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155930 Malicious code in ican-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbff21555dc42baddaafaf6daa8b8dc50fb2ae0c8c8c710b518f15b37e17d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150548 Malicious code in @miptaa02/ayab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec355182cd033c5f14b99ee395488578188354922d188b41b612e21a3049bb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164989 Malicious code in rival-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c57aa10da59b736308927277c1d9ce432c61d553a2fd0da1968a94607d11119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155887 Malicious code in ican-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b7b18d491182271c86cf2e1045e656b5be313843f824353f38cd6e6d10f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154867 Malicious code in fadila-poke132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b9bb479e339668d64d5729b29aad677f0352dfe0bd2f7befecf99ecd2e1fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168899 Malicious code in technical-alonbio-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1455a9d90c68aa8aec34c7b76c8bdb8c9b0f088964c1d8ccb619a0fecd14b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152695 Malicious code in angin-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa344cec433e6af641f76095fa2b53d2b2a122af020efa2625b8d1425e1b1361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cdcb70810e767d8f2eaa6aaf77d1ac5f5b292a2916a2fe9afaa9f69ed27e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ayuyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b480c825922b9e0898128a3d94dab43d85e43588cb6b42bc213a1b86a550e425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9afbfc5f6231893497d2533d46c8036289219f31c794083594c72d44f0c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b213b7a5d8d5802e868f475ba445216725c522fa5e5155502b86ac4a65e88090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-byturaa-nafmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4afb1d27a0049933be72821c8d7a14f0196050e287d043bdc526e45bc75426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatira-godotda-taayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fccba8bfe403368ab87812e82f5f114ce8f1e94c2fc94d5aecd7800a7199a38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umuaialai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c9dc62575db5b9563d06a243e3893ec2ee958beb966528dc7d7ab252ad6be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265aef0d2210cfe133839dc4d933ea59c087d3f5cd76d7b1e712a30405b38b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01295b3f0b77cf31405c7a46902e0da4f600e638c3001a0d500f1dcd8f7e2639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolakui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d408b0d44b1a0292f69ea6010319764b137beba82b8605636cf902ac3fd1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b6519c8b82b42554e613d62fdcebc936a374bac10f08d5b4b81f79d1d72bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...