MAL-2025-165138 Malicious code in riyanto-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d712134482c7f972c54740b9ccd238a34224cabf3241c11a3985d2a5f50ecde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163723 Malicious code in nudela-af-gfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b7f2b96c029853e43a7203d86e9fdbb146c93ecf9441457cf9bbb3612093ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165054 Malicious code in rival-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f10fcb966718d85921e30d2a9667716e45fb364deb11fb0e280e44b5446e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154606 Malicious code in dian-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2860c4261d300fc1a052fec276ba98ec52bca7e96a7c10d202de4b87fa30272c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166916 Malicious code in teagood-lokika50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94cfea582c226968e344aebc02571cbd7c77921992d7550126a2f1a665aa983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164655 Malicious code in rino-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bc5b815b9047def3824cfac976bdd45eeed244835a392aa6c32b4e1e933c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157740 Malicious code in kuinsu-lubuki-viakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc216ff70452bffba6583ce7e8c3f20d90660e1ee29446d51ea10eb2dfd03296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162252 Malicious code in nokire-akaza4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9080717d5b6bddef80e853ee34e800733f9225b58d081229de7115811cf1d91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153748 Malicious code in billa-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0d675cf028c9ccf7cdae811ddbc0cb5964a9917768cce14869691c63984109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159854 Malicious code in mansila-tiola-mazoala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02b24670e62e10dcd27eae41cc4f9e7f0180abc3686b06652f304a80e0c4cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9cc578b359cbc3d657f8934e29a1026a9207b5e5b6763fa88faad682d0c4cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aikuk-aliuanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90988456b0b045ccd33c57df67ec97f18bb36ea3a1c165efb1a73e128b665a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70ffc3c368fa46e9f1751b1286419802334e281ed93bdde22c5531291f7fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ajsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905395350e18305c2a0ca6bb1a7fb1e7e00f070bc6fa545eb72a0744efab3c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fomaaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd74fc51658866f1465c59d8e06fd970cc6a9383b2b9106310596f2dcbb3906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152713 Malicious code in angin-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674b68aa832686c0581b80cb23c8419f14025a93902302eda3e23a6712e5619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiuaapa-mapotaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503a49360bb16897824c97c3aff47fcc4721086b1d2f178db08267cfd519e610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-males-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ceac201a669ab5580d2d5eb02cad3fd744a6aa39459c4c411d4e4f43b68fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159935 Malicious code in manttu-nuyatadgssdfi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ecdc88a3dcd5d1b92a0cb2ba7c301a8613eaa0b55ce172e4d8c5b8f87505131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tyuaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf606ea7b95ddbc85b59e471a0aa616c09338486f971ba7bce122d5f6659ea0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...