MAL-2025-160744 Malicious code in muda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb846ba3be78e9278978e375368f89bd612ebcf9703f3c89fa068dd9eaa777bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162933 Malicious code in nokire-loklok76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8081b6ee04fc923b7f645b290b455e30172663b9eaadfb922e2a0015cece9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163240 Malicious code in nokire-nana82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e11eb02aac496f2426dcdb466dedf76df3b1e3cd25f699abaa7426d2804b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167181 Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160886 Malicious code in munir-butya-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7130879b556a9d19d3873891b035441aab483ce4c8151ca764ba1428fc5734e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152941 Malicious code in astia-alabki-maloloiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5df40fb60ec777012361af6b41b9dda7be75c0929690d41a6496bca6619b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uofigapffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d65df92dbdb14ffc3355380146b1b93ba86ac360c56a0ed5b9c92a81edc364d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgnaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69307348bb44bdf716badee63f63c90293d3b7f0bb1c0e90f0d3a12c1bf984c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-nururl-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a85bce02be7d4190e1a5cd06d6478a24d81a6af676752dad981f8737d62734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2778ef66fb6e91fd0ecda872dce04399a13550014302c0baa95c77e8dd2fe85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32ed0e99a88d4199e52396a7983a641835d0734e49251740fca5376d5865d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-nurazssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0755738e42217653dfb9bfc9587e07c31837775e3f991e176b69f3d9faa70c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b652b7a36009e429748405b3023e0d8ef69132b8ff0ab149ce5a0e17659ce2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fe020991486f19d5431766167fa970152a101e4215bb0aa5c07ecca8f1676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83499c1ab5f8a33d6a0a17c86c3e931b52b551bf9e0cca5a0d5e35fc1032f324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e281bd0478efa9bef9ea8c4a42734aebf5e24e06f2a252a180497bccead64920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97bd55330215d36de9fa6ed493008ab5f7ce77fcc30d5557ee77abedd28ee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fsd-frseaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189b7efb43f4a613a6f88e71d687b7f34bf4d4423969cbe456191dcccab33571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-ftfa-usina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42decc5bb1a06ad5af93c40e80fc4233e97c3f2f8f7c7ff3c22be26abeee6aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...