MAL-2025-165031 Malicious code in rival-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ddb291fc2631dffeecab29b537064193ecc6611469049d26ed5548cf700fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156320 Malicious code in inagi-vma-nuagbarif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f6c2e9bc2c23966d61f1bfd7d343e0bac73c7ec18a597ef4700f5a835c8f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150351 Malicious code in @mipta19/asisdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3132407be96d2948acbb83c5b52108f5b8cf6b52075c0f31acf2e8c183592e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150877 Malicious code in @miptaa02/nydfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7c6a9aa31d2bffc5590f1cadf2bdd453abb00a8da8eff2f64d2d0baf05d9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169599 Malicious code in uarg-mithai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0684fba52be7f806592deafaa6697b90e992f15f08c20a4c4e08fac7e31fec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162087 Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154062 Malicious code in cinta-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a09aaa62a9c7cc34076e0a61f6ab2e18097411e52d55668753bad34c8e8cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167546 Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-malas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845c294e5fc23ea7aac83dbc07e736f0566e17f452927e4617793c962648ee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277c1560c84c002e674f5c18fc39fec41dd8b835a90237beaa302ff937607556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec678701eb69cbffaa908965828783380cfeca935d3381ee3dfb0982771f5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatfa-buaat-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a61d5fb58c646607c00e9aedbc5bd8a4947adc89c034c5dde2d9c4a24f277f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13319880cae03296b3c5c8320aaf8e397ff0373a195c6c9f79632499d1d2506a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fjgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b23cb3ecaa5afbbce6cf47869bebaba495a8591cf01b6c51f24e1ec7348edc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4376c685bc88e4f38ee2a95c97dd547ae862af8aa3bf439c6c5410987c317cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a210161e35213f29a88c3c7284e059e88e3043a46a0c0860d264fa60876aeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/qwadxedda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848ee02587d5d4432cc0bd2ac613b7a955582e6c149497a5f656d9d37f708af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da75e10dd0cd89123b8bbe65d67df9577b428c3d5a49696adcd8bff0e0afb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d99cfbbdee1ab7532515386b9af8ee445f3c6ab5b903f4d2514b743734c3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisilaa-pafnolai-asigoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef491f76f010c4f55cd13db3254b935e628e8ea89f73bdf26f52c3d22a396d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...