Malicious code in fitrok-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cc575b68bafeeb41a08af69926a7a4444d28c700d56b8583a0b9df81f456d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160285 Malicious code in messi-adaea-dssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0935dd6500c83cccddada9a0c1ce959c4a302e23c838e71b580d20964952f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b89d2a9f87113bcca99fbc43c95a87fcebcbcc3f5516cc70def277e55f9d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298da9a07bbf54a4390146d4392f797fb08672bfae44a2c94d222b6bc78154f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc09701127c318e88b09100a2c7e4af648c20bbaf2eb9183b7fac09a499287cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c497681201d33f03da7bb71206e5f008cc59bf70e35df1c0e3bfdca2f499259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutr-sds-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a145a2e489ff790dc9e8ad5be487ba240fe2a8c65b1f7db70bbfb14f39ba12b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igamofgaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799d61fb8e6b77a24d4c60cb8daead29c3b7cb3fcdf55dd9037cfb8dea3490f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3b6f81543ec1c5bd0248f49fbd6499849856792584f465592e05f0d50cbfb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafiday-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28d4bad91a2611d995fa94fb4ef5ffc752af3215919bb5aad5db52c26b7cd21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3623d0b91612ce83c1cc563a9beafbacb452e27389cb9b7354df7ccb0a0d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uauafdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39dc4e206f8c760992513e318679f0cecf09e38a6c498bf71a3942107ade9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152472 Malicious code in alvira-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd4ab0a93029666775833b61f3d081172dc039d4573684c846e9aa6feb6a8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-gaopoig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfc4288adaa78c42f5c12d16e5c3913305afb02f98d2248172dec91b12416c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150483 Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yisaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed91f32ffa1a9c64b7a7df3ec039e9fe8637a76ef322e09bd2e9231ab0a6ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155888 Malicious code in ican-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba5e6bc2940cf0bfb98ab476856c303351e0381a6943a1444e0064aa48a279f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157830 Malicious code in kuinsu-ukiu-vilkuakmaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d913701a3c2b6a98a233221f4f6eb501a792471cfff19c114e7aad297f922762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e632fec6a2d168ef5510c92694ffe31acc1d07d194f56732974be84304e018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...