Malicious code in hafiz-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfde3e6216e9958ffeda4a51c0b2a21c3c6c3884ab56ba21bc481d40ae148cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcdaf08d240fe61a42ed9ab558cdec91fb2544dcc5f6aa93628b7aa04b1cb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-tavban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002a19dbbe1a86e0aa7bc8657ef1be32ab118655126f7903cad51d68531152ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/erui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ff922556d0f07a6f7e558f4fc3057814155dd10ea4ed0cc681f0884436b59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-nudday-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b5f759d5eabe3b4637e1af4d60f6b6a5e734dbee4c9a654448281b9930751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mak-angabofi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4957043fd38b104dadc0eab0213c389f08772e63be69c5d7f0c66b51a040c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-ikaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb90ba99390cb39a1c7747978e1c6db3a3542aa1950f2af4965cf7afa526ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b36ed009609d2d36b1fea761fbee071769c53aa85b361336323b779c5237ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44b92dce7c17c872740fe46dd7f947b2c0d2e02df8070132749d22e159e8efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002249294b795d9a3fd9c0f6ae2f66963a13ba10cefac47e93f3522ba153597b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaifassgia-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e13608e85b1393fce3b761d6a55b18c8a7cd08dd475514c0cf72345faf6c6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc04eb44ee43d755bef265dca6e73050e6f0673db7f117e07f932ddaa28fa97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofy-mutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b397c22b379421356808189198f057d4dbf10e6c7b8618d92ed7b86cc766d706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170540 Malicious code in wulan-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36223b39d25cec97e0bf944a0b382a46b81367b7ed1b89c8eb9bcfd43330107c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170400 Malicious code in verify-ayica-amuinadabhua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2ce914f3bcb9fc7efa7955fa7c516b3120127f6c384dcf15cff5fdbb66cbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154878 Malicious code in fadila-poke143 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7cb03826a3479ebe97cd861a6173119e3679e30e773e2e78070bd7e7871c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165021 Malicious code in rival-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6019d3df7465d7f4083337ce5dc6f9f0b5ae1a8e8efe51db4fc7093e071c3002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150056 Malicious code in @mipta1/ikusho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b65bc35be347c59e24a9508c70a17deda32ebd2b9b560a0669fce0ebb435a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysa-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59075b18888b28ec66b0f54e48d86e7d8dc786ff03be8524ffb1da70723adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb8b2234fffb702ad599bf0588499a213818d3ef43f029842206195b0e0b2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...