MAL-2025-164851 Malicious code in rinto-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ffccc9f334c669f14f9eefecfaddda49fd492f8157eacdc3cab93e4fd3ca72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159374 Malicious code in manadsi-safda-mundarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbcab64e2779477acaf71de8ef5eaa69570112eb5996b53b1a9ac799a2df5f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164062 Malicious code in parwo-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76ec1dd9145b498156d9fe4f2fa87b3225a957db4a9815e8d32206b633ceb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150150 Malicious code in @mipta1/misades (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e79343092d711db21382e9619bb345fcafa3528873bf1a381f5ecd42d61eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149912 Malicious code in @miftaikyy/rssoya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25fb70be183e49c658b196371227e5fd8726a22f58dff852fbfb34da44c8317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153834 Malicious code in bitha-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3270b512f57e1f03a79d94e1fa073bc2e80a4c2583ee3fb72ef70ac86e1e2371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153683 Malicious code in billa-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e064ad7775f6eca2c5f2bc120d076c9b1b22e351a8b0aa44bbeb715db81c9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158952 Malicious code in madan-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d95580a2f595dac524d828c8b55ddf9df9f3086e2aec84367877bb18fdc81e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153216 Malicious code in avminah-fagmdas-diewogrg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0743a48753b60ec233fec9f638f8a4fc9abcabdecac4e70c7c31f5c0adce75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165066 Malicious code in rival-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e04bafbd7735bf2ebf09259e3b098d5094c0b46c08a5f1ae866c6581c693074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d5700f034f1e0e52c138e695fcc76fb50ad3ec9fdb7d8d1302b0161544d848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66da4c09dbb56167906c9a73f3aab3319a34995f07de0f14a787e9709eabf236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a057e94b830ba8e1807669f78a8aacf36dd345bfc63d6b5001915c212d092b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-h-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e1f377a1e3826d7fcf7838d80440bb06a7e6c4a2122f8981536b924dceb5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagis-ifada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbc31d88e30c816ee42a680f0c29054d8ac376ebd25b6bf5441713f5726d2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a265b185c97c3a9550653fefb3aafb128f0960e8b921b24a33ec5557586355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tdhfla-magai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d12cfb5846a0e69211a219c1a5f3842ae0bd320cbd79f7e88135c221623e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akiualaubananuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fc835a73f0bf1dce91ba812442be082bbe965e81b3a96e282768df04e59a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09542ec8171d3752da88443a5a0a1ba758ecf7555a7fc2c05d36267ea94cf13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fac0aab20231fb50b7623cce0ba5724bbb60a70a2b63b9719d40eca46cb2ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...