MAL-2025-154506 Malicious code in diago-kulpo-kai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998e5917bbc84c630710848c8cd66519d29fc2104f523c41bb35a501fc27375f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155011 Malicious code in fatidra-nutayua-isaufy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c05faa744425afd0dab270ed917d98ac112e6acc8c865753ff2ad85a95ea2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156444 Malicious code in inal-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff80f75cfe7fea41fbabd3c9ca48a4219d4a31899f0528d66bf731ac320b63e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157534 Malicious code in kentung-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67303e3cba5a839d1af88dafa180b47a1fed90dc90e2fe0ddc43678cc7c7d378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150091 Malicious code in @mipta1/kdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857149791ab35e871ef16de5e82fce15ae83c8300a1e6de0230796b5a0888c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151154 Malicious code in abel-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb59cede809539a7fbdea4f1e9ab6846b25b5032b05337fde17b1afac8e3f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168723 Malicious code in tealove-reborn46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1452b405b1af9ac42e2029552de9d7905007b6892fd3471418864e7b62ffea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ewraussjfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5c3db7301d2d272ff2072c02b7ec7b95eb3fc353639be6376bb04e47c9e40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dd5dd30f2f91c409496481abce17a0c64aaefc118d6a2c84315c3fc58db411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibon-upabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164add95ddd023ece4d79dd4fb2f39df2319f3ed066e52ddb617f7cbbd439832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b636df2a11be8b762fe1e0dad2aa33ab341aa3995e8c6b6d1cb4bb5cc2e637b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5496cc8e6c017595b78fd4cac9691cfa6739515b45cafd1dd0623dae97dd7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfafu-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24613ddd199978d7ed585cae37ca4dce975cc7d290a7abb10195ca5a523bad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107ccba67c7e34b96a683cc3d46385b5a337ff699249c042b0e68ff5541df8b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838ba09f0602d894251f18f35b2cdcb33aa5ae41869582210c5af23db848d88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bfee52b97b3eb63e913e68b411394996e88caeab6275479a7e9444b1094a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-digfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ff2df968525f0ce0888261d4c483be536c59700c086e0b02a27ac2c0769bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009d2e521d39066eb508b466f6d05a1f6ad5574d66e0065ecb92554e4979b822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b7a14edd78d09458bb6b16b3797709b223f408f7d96c4a90bbd18887766a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/sdfsd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af9df4737dc3b590271c3a7cecc041c72e393dae5040404a562b9c3e1258209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...