MAL-2025-174926 Malicious code in inul-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547bc197f1fe8ad97f7d10d9665ee21225bf59b65acd19d0286250de9caa4174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otodofio-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125bb54243eaf932965322d8a83ebe0ce7c2b8133e07f2b5a518a8a69ddf614d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heres-matinla-uinni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fc8ff7bb0b3ce717e653f1f41cfe823117417bed563f975340cbba318ff355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171836 Malicious code in seanfionacollinsmurray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c28c1876444f332875f70fcf72c4ba263b518c4102b2aac24be9d50f2229130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170609 Malicious code in aakifnabeel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4fcd85d0427c9e54454900de1183c8d2fbc79e1ebf9d6051146d9a4acd19e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171026 Malicious code in charliemorris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb967298416daa466358d4f6247b8e6654c7ff5ded4893efceb722778e1885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca73ff88763c251d2533f93da4dfc5aa44376ec44a5c4681626d2a269104e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc8d1a53183fae0043ce3e4f177941bb5b5e2dedd41cb70435808d09c5585af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f414137e3bf9b6e24700c92c51eac8d9c6f26fc8f42c4ad947b2267518d5091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ed1c8316b68e72aa26895c6201cbae3e15557c236cc97651c4410d32138d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb2fa9164bfd4dcfb261c5cc3956a5baa98949ecd5670af13d05d9529a0e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce65c259ecb2d3e62a03360ffbc239cb14a407130a573e98096a3621259e9325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158404 Malicious code in lookingan-nakomi44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f9b9a842e6c9ca6d3e7130e8b8f698d2b0a35fba8b8908c57b9435d8fe99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151752 Malicious code in aciyua-idust-dajuoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d006814f57d6f9a767516ee751c43977c4e3e5cd2ca5dd2a160c4768c15519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in s-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ec3bd884b212364035f107764549cee9d7b4082d86a313a99a41756b426f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163182 Malicious code in nokire-nana3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f3e07462b1cb8c31155a812985f34e528cf2e6243748ae7f0b0cf832aec4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169001 Malicious code in tehah-mkot-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1d59433eb4372aa837283e6fbede20d074770bdb7b3bf6770f250ad1285b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163844 Malicious code in nudla-ofog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607a632ddf54b34ecb68eea529365a6cc715e2c8ad2ce45d6f2314cf1cc0fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167920 Malicious code in teagood-yakuna6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083e96709bbea2800002d2c02d2b80cac043cf76b1cf134713b9ad306713ca82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156408 Malicious code in inal-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e6a533c3ffe94702afdac91dfa0ab6e7f0f340265d94d71bfd2e1411ffc538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...