MAL-2025-156975 Malicious code in jeep-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583e9463a2fb96638c882668a0356d39458d67fc2bd26e7da25eeae3a329c256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160747 Malicious code in muda-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d7a32681176ee6a6773eac2ea8bdcf571a6b4604b0e35a1671f58c76db321d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0879637fe180895f23e5318ad9a2fe5df23fb7eb3618efd65e9f71833580b945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd87721e88fb4cf7bb85fa17fecdd11a782471ba87b0540f80daacad9074498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157874 Malicious code in kupai-lukonta-igavufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daf8de9d5cd4e6ad342ce9dd5d354787db3fca92296c493ebf87ea30964e5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160741 Malicious code in monadi-nads-kacuang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e1ca8f9b4130c7714c5aac0c9e15d3988e2ca4124a8584daf202d77bb991cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152836 Malicious code in aril-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d2d5a73a8171def99f0f9c56ac08dac121616aae0d395c27eba8ab0926c527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoiki-nisnutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ec6c860b856ef9058ec41b97cfba56f784f93cd0f9bfc285bac5f9396c27ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ecee043e6ba500ddfe8f2f016de3fa3684b0e71613d722cafaa772e6ca0753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24b67094c64dc96b2a475d07a0c4c324c026d6c3afd275ea67e39d976b61354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-ung-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e981aae59afc721542c160f5b115b7d2b8bfeb43bc7ac2945dbc60c16e292fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841391fe9b658f7ff1d1a6fda2cf66188c974d72b14a28d6fb08209120b18e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dauvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89514a6fc3f526d6af3b1ae675bc61e960bb3ae026426c8b15d6e4bdb708a7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyatassdfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce0e954ddda61a75619e42f6362a5499842c7f8bb20460405b712bcf12f82c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168483 Malicious code in tealove-nanami7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5152d1276bab3b8ff523d0bc11220109fd07e339b638d9d8a60af560e8cf101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168233 Malicious code in tealove-dana27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d171aba2de018b29020f6ad7cf8666441ee1a7c6960a0144ee12f0ff88a76e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160379 Malicious code in messi-tuw-ddtssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795e658da334dc689cbe97b628aa82cecf0c5d8de4aeee27569249e61a8422c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151508 Malicious code in abiuna-mobile-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edb5cdce5cf18435aa36390e4fe26001ec5021b67be4362cd89253aa4aec761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166734 Malicious code in teaa-reborn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647449e5010eea28023eefd6194050fb3885cfe8d350d59ccc2a8b9f76ff0a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb9fe00a1b5afa70fd61d12400c87477200843624892cf9f7c8572c4e0bfa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...