MAL-2025-157106 Malicious code in jimmy-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b4474d4d8455c75db3cff68a6a4b0987678b188bbc2142456bf675b04c497b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156443 Malicious code in inal-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39c49b9a22d233b38ed77edb552c7ae8bbc46bac1d6e0ca7d1eed98bd082258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160519 Malicious code in miracle-dok-ujai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3571682adc11a6fa1a8304bfac44fa876901bf2c459e82485f8bfc4c9a8930f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166929 Malicious code in teagood-lokika62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f1ae5dccdc31c3245dbf42edf26937a8c0e4d6e828afdf95c33db87c092e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150348 Malicious code in @mipta19/asdd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0768755b12114795a5f7bb2f8b4d05be5d093c9b38dba48a9e7752efbf3ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukonta-igavugafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eea8e6720c146cd8b2f62e1bb9b276ca1f79bc1026ff43188d7c0b6182248c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ntda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fbc06ed58c7cb2cb0907c6c6803b3423b9ecec3a52b64a09fd2124728b9637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/vefgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d6f936c1ea1ca70cc49e1362de3749e33a31a29bda77f62b6704f5bfb5da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403dc22d786c497c651e2f6316f0bab2aedce156a3fc1b4b6c66bfbdd34bd04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogof-dufiot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef83a178058c679d8c67c72c9533a6475a7a36b944702ad49a8598aca473b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bda63db49efe3a6763560ca6894dedcf027825072ea08388c3380b6f88b7a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyilud-vamuikuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13277b55284b91dc994327471bbc8baeaecbcecd01f25ad28f974645819e537f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigugamafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2fbf82305887041898866fab8dc3ccef543e6a048809bebb9755798800c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e2079d6201e8356a4f88cca2a80b79cf34dffdfb05f39a6cab4b9fcbbbeb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bisu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1fadd029460e52a79474c7a5ce2784883b8c0c37fd1c6bc88ea32a654faf6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49d73b90c93f36027777da786ef219920d31399b66c1b1e252a8da3bbb33c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5d3c40bca817cad29b66e5e87c9b12516131f1e183f6572e0ec0fa6b33612a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154559 Malicious code in dian-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f9d269e102eb8501f180172ae97ef0ab64ce6dbe638e9fb290ef995ee30ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155949 Malicious code in ican-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f78462f73d82d3e7d714d5c99f8cd464f3130b8869b62b9870b8194b240d315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160894 Malicious code in munir-man-nabfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e9138bc7316cdb846532d7482c24e1414602a0cde21ac2ef23a229f2d9fca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...