MAL-2025-152658 Malicious code in andriani-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc0646fb421ad5e5dd787bf161ee495d0423fda385290475ba53ccddf22be32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158083 Malicious code in layla-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a416f7412689659f1cf67d4bd4e0ddb89abeb65621cc4a8d7359e3240a04b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164095 Malicious code in pilau-akaviu-kiona (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bd653094d05a4090907ac350c8e30e21a046b40524eda3ca3c0fed76ab039f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167903 Malicious code in teagood-yakuna44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e15dbf45832f16765cbaf1ca40262136742208486845d4241f075abdee4bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafufi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 237205d0b7b3e5ea94bd91f4e8648f2ffdf15276c6cdfea4f78cf6518388b8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efa789ac208d35eb5233072748f2c4de31b786c00e4ec9d28ceeca5398a6750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b650f77806b33fd1bbb93154795765fc8f5c0980960d6aef480c9ffc7ec91679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe93576e307e1d02824e5846cf94db29b2ade50d946e937f59c079c5a0c4d3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misuanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca2108caa852cc0264f4ced7d032d3ed3261ad589536c0e551e80945f60fd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f25eb73efdc6a24c0fda816ad22bb1f9cc3d86ae4f86bb4867d8ebd9501f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705c2f034ffea819555a1309c6a9df958b47473603ee46bfd57c218a37fabb28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df38fb556f82092704a12444a14bec7582f96e378302606aa8fd97f77f8d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4a1ec97303841ceb2c238afd04ddce3434c47bd341f318fec7095ebf69639e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nibutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca74ef5a6105a3998e478fefb20f07cdacb4d757eb74e0993e23381ad346a0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafagaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ab883701dcaa6f7b6f471c9c7fa957d0a2b62c68a1cea47609663b07236570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaimoi-aiokaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19197a090512953cf6bc648fd007b27dac533b786a1b66d830bb232ad4651619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-asea-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a857d7f3448d8b9919d7bd076d0bc06890e77abe1e3ee7474b0d114829016295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25db76881326d0374e09a4e2fdcd20968b679803285a8902ea9b78ed8e362695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-qeuss-ur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a775c5435c3eca31eef88b99e1879238f95465bd632518a870089346046690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moloipe-asiinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1ee14c9524581a2223688ee5bd58970b79d4811306e6935b420581df477d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...