MAL-2025-165380 Malicious code in sabua-muhuyu-tada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3893db434c09ff80fe69c906c5f39b97460e3406882e2edcc164dd3be802110e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155887 Malicious code in ican-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b7b18d491182271c86cf2e1045e656b5be313843f824353f38cd6e6d10f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160395 Malicious code in messi-urt-efduds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8a449ee822a9d43ef7d2ad18a3b790a5307433f1b3fdd60ad6ae16c4eb8467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155945 Malicious code in ican-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9991c0ef9b3242b720fde3a7c135c2313ba1ea9235c3d5018a30c5d5fcf2d100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158879 Malicious code in lookingan-namalaka65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4042b5dd5bf91b51d3d6c98247587ae2f08d552f878f0ac414cc670bd346be09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164842 Malicious code in rinto-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66438272c851678ce1d946725b6bee6212b2450b779ef615ae7fc2c4d362777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154867 Malicious code in fadila-poke132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b9bb479e339668d64d5729b29aad677f0352dfe0bd2f7befecf99ecd2e1fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152695 Malicious code in angin-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa344cec433e6af641f76095fa2b53d2b2a122af020efa2625b8d1425e1b1361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc60c78bc5b784d538ceeab38a6958fb670069050d3d87b2be09cbb58cd4df06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93ec593855118e68c1446b8f88ae36d5ed05a624e7212721786d6c0f120fcec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyago-dafaaiffuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338d5ac6267413e08fd88c59fcc14b793f31714fe91e1a6bf4f3ea8a34e30c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27075a1817e73e6b05d6f1d5523415b0efdae5d7a9fa4ed690f9609d075e0da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvau-nalui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f85afb7952a99da862bef441868594e70d9f146498eae2935bab52357d40f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dajafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e45e4e06da30b6baad07f4e8a1e5a346567916adcea0d3bf8797a1cf614f5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f673b5edcf26fa1fd4a00551a6199d8e70775a9dad7f9837a9e9e052b2d6aa09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-sfd-ss3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6149f398396ff14fe931b9336396e0298a7610cc79f09ec7ec893fb015ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82597a0195b96150895c292c4e99607f11dddde03d976e1a2ab3160a653a6e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e7181f49688160802cf116f9c70affd7a2e45af2704355f4c4936c2466eedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa6074ac921fb0a22cb2a07cd2b91764bbffe5f121f928850f025651f904b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tasdaa-ta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb44e20a340621639daf20d9fc66265dc9c2bc312d9cda3eafce1f40cdde47f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...