MAL-2025-152041 Malicious code in air-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91c16cd439b4359c36e0a4ad6e526260fa463e518c7d94ab12f165b345aee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161008 Malicious code in musasiak-butsd-teru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19351c2bdc0bcf7709e31da5a408ff7fe81dc0ad893981308465c402e55d6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153401 Malicious code in avminh-afgais-fafdosafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52162f730f34745434ac8d71da8e47dd364cc2edb03ab63afed62eba64a0565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159639 Malicious code in manda-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48839bae2b5a1999c39bc1e43a1094d439fa8163ad7a6ffdba5426890fa827d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158024 Malicious code in layla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745ca5b405dd3235a248750c3d0a5fcd0552a4aeec0e82e6f20c1804a3b34214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155071 Malicious code in fi-bendera-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b8342faa04f417e6d1bef0757ff7b90625d040897aead88ed651231f1ad016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-namasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89fc41f84d18c51ee0cdffc9b9d9a935908168198935ea7aa03f1b84d44c92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifa-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3b32114a41e4c584fac7cd1d40479433e7444d9c1f4ebbb441f1c9ebf0ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e6b5a6946e656af345999f9a66b267e2d816c33cff20cbc9c5f108ae0ce78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aseszwassar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f595f0d22d06033991feea2ce2199b253cc1e38afe9e53bce9f5c6e2b5029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d3f0079a6e1686a41dbbee009ca673482ae82c2dfa3ebad2ae3bcec1ff5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0c3d54cc66899c2b68bef599c57b36f35a777fe23cec34a917fa453beb797a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b2a8fb68d6833e34aed66a484c90d1c70dbc3a5d157bb1d4bdbc88761b093c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-marzuki-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f8a7ef33fb77b67bfd6bbd6fdbd24aee379edf0da1889ae3c58f5d13b26a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofaf-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d0572ac04ef836f84ffba9b06a1c890ab24bbff0ff41a7f8e6126b393a4fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5e0e43b9b4153ba214d06e01a54717dc8127ca7a763f82bfabbadd2bf4a2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-mechanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea755cad73ff37b99777376b680e2031200e3326480d44bc4b31b3fc0c7883a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisnuabutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6792642cc415eb7378e271d389b7d2c5cf083af81abd29e27e6f400b7ba6d41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b072dfc5c62bd12611390e8b503ba2c8717fec798c1f7540a021b5c028ba16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-korea2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5455fb176d354c1e2ac76b25367c981f60babce7b8f4021994360d75e1c39acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...