MAL-2025-162568 Malicious code in nokire-genji76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f181173e01defa63f360be09173bb422dcc3fdc6fde38c27f925f5d36271bacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5f40f1e2cf3a07084d5eac55d67efa592b507176108a89e71bf3580a3218fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9136809fa12322dc7854ba2f53dcbb85099ea41383a04a6378fef71daeb60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eabe2029c156d47cdeca8f5556c27b5422f48b28a81967fe945e2bb12a4b8406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ghxsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c6e08c6bdf914aac495ece5338e271c04670ae4d7694234dd196813a1694b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4ad276c5dd4720a6e62afae524993bf8a1bacaeef2106dc605587704ccad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e7a541d5a5aef2798e4b91a4bd2aa4092ebcc859a8f87d8728507235c1570b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-foahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ae356489c87e5d3108ce78e979666c14bb15dde0da2ea78461594b59ec202a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05666dc509f0d9a0355bb0cea95db2d238896230acd3b7dcd7d96228c837983e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cefc86278bd4b2833be8a9a66f22a0826db5a17d6f9bd4296ab429f1989329e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afiat-usutauafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485afbdb8cafd83e03cc23fc06a67b5774f225724d5862854b6f45af8da292ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023b7c002cee8e0d0c2741822bd9a475aa911cc395c63fee67cfc6cbd332f2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ade38bedc409415d387725ec93cb5573480d6b1a9f1270f3d469d01d8e0fadb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d04b471ea753cf19c0ce99b9e790c8ed82a3b5c583945ca8664e68b4c8c7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftaiky-doll-partly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9752d4e909c55aa087b0f6dcf9283c9102d05fbba86ab4ec5dd865e75dd7e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03a0352150487bb27c879e0b6f090188855e8bc00b8d4257158885e957ed565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166403 Malicious code in sunderlan-ud-vaalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661483ea68ff843019185bbaf6fa0368f04e079427aeeef043dbaa86a4659ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151527 Malicious code in abu-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aead1621fc8e3ccffab57042fd99aed2032bf426d7f8d904494b733d5c33de73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155795 Malicious code in huda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c22def7c9da8701bce9b48ef0c8d03ff082fb3462958eb5255f0e08a0119c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167778 Malicious code in teagood-sukuna25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e3d568831188c08cfc1c309c5d9413b28f263d1f6803b6bc84e53a7fc871c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...