MAL-2025-163935 Malicious code in oalgo-kiulasolai-akiavabmako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d515cc6c37f315559fa8f11b9c8c4ecc2e06418e579d878bce3f0d168bfd896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150883 Malicious code in @miptaa02/olaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49f8a463f8eca05bf116efb6376cc710471d8a0fd2f1ace4dfe5ba0a3300f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166132 Malicious code in suharta-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed44cd286edec5d212afc6858a38784b3c524f5ec341b627b74b787df5d3458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155949 Malicious code in ican-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f78462f73d82d3e7d714d5c99f8cd464f3130b8869b62b9870b8194b240d315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158562 Malicious code in lookingan-namakiki50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f13af0ee28e2e2a673b443248aad980f742ec7c62312eed347b98d8c5337fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156020 Malicious code in icha-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d8ca40dfd69f18bdda83d35d49c44802817e8c5a80e87511d4568725621515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunusilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf671199958077245ce063b7c181684117c9ca6c3e108d17e387eb1f44cf54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-nasuiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eab0a69c06132e835168a64d1cc6fc784b9a731ef3e611a4e74e6bd0a699dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd7fb75efbc637f36190ff59be2616a744c68e52c116f2ee378ec29fbcfa0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiu-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04fd8ceb07f68905b6b564ead35751f4ec780f05289a5c5340725230257445d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ersisus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c95f24e1ebc2262be2083b7ba6b758ada6c9c312157c197437f9c5c8fbdabfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-grsdas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d08680c63d6dd5037040ea8bfce9dec930dda5ff1f067d7d7751a7ac7de95cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259ea68ae57a36f3eed9cebb0ab1e0c8ebff5d1b2936cb39ee3a45bb7f22e748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ef2d470efab2f00991195b2093d6ee2ebcda59fd4dde1ef0a7fd965f68d25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d98aa9f4451a9c8c5ee1e133a9f9e28a27806ceefbfd8d61593a5d91a3c9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sasddffsda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74bbe4a836e328f218c8723c373e418ebecf28d33947e1d4e8eaef7901eb66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asayig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689c7a87c499f33efb7ca045e03ebf8d133543e73b2d1fb1ec132be97494d426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butrsui-mutru-mutyooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b1ecd585bc0ca1e2cab3c18e6c405590deb20226b44b6c7cd0f6ce9c06b35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f14b2ca4ce2e266a9d6210dcc9442f49566b286825c901c75d878b4282ded42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920d3854dd467640b5abc8cfcfba271f2094af379e35d5d2ba4ae98a24fdcfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...