MAL-2025-151252 Malicious code in abiba-alvbai-ayubnaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99df6114f734252cad08687b976fdc5c2ae81bc8baa6d01a1f0ff421660f2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/redx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2702f561ab8f3fcce3e6c78a772c1ce4699b3c9cbcce8d42bfd8e6e2e12e36c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165862 Malicious code in shilang-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d2d4e8d17499c177ea37e854fa981f336bd4e4b9150244fde30a2acc42ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2930924b90de23ef79484abf8e592c084d7858d17c94e1ebc05a12c5ae387d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d88b62dccfe83b90be2f772f0feffb518ca1407f9810561acac5b3b672ca3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162298 Malicious code in nokire-akaza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6db1ae1766f210273558146c34626504802cff844501ec740208bcd07d724da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0930cb1e50c04b2cfec8a79cd09c396bf3f4343bdf1d6e5d855815384adae800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-kntuoolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97c2e52c154b02d979226655aa50140dd4894689b739593c38739764e1fe127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobile-amaioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694dd3511f1d2f6c510c6ef7e47c6fb8abd427a140999206c23a8c72d9c82f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8f56ce64da2d35a5e2342a0a05952b810474c67bcb689367e978db7e970815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c597d24b73ae5d344f93c94de6b45653bbaaae67ad8f84ca8a2bde385360239c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-addo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ad12d49efe53621169f2ae0c7b77f16645f48b001d900034d90be6511bc8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-darusdallam-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6254af0e5336c0510adf87ecd1df62a025176197dddd85fc50d6e15d20c68081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e63179ce664864e45c4a25918194465cab6db431cee8fe310851902911cd21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166209 Malicious code in suharta-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc3047d9391fb02bf9e44d81980dce6e3bf9dbd099b306bfad16c7b97c5f221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21195d106fa8d3df5720b0a04be072d93cae6d15756c2c05457541a661f7e57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293044cdf88d88ab9c2ebbe083f9185fe6c4b7f30a8408d8f4fbdc03687db481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b727a77f703fdcfc6388ac66e1709f116ef22a75feb33c74bbbda5341e72b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159493 Malicious code in manadsi-soroiaddi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8ad061fac3cf7a95e6a70511364f6075f941c3d5541c8d6bb766344d0096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161980 Malicious code in nasrul-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533771c0ab1d4652bdfd2c4dd1df88ca107bb75db54556ac570b0a02a914a349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...