MAL-2025-164727 Malicious code in rino-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a651add57774e07d461650d3734ddd0a22b37924dd11f85cbe702603e00384fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-alusakilamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd535e79de27cc9e20bdd8b38cccf88b5514ed7ed34ef6717df1895af7237b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-dana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f488bbba7b111ed3fa75577713f770a48e28225ea68d397c6d1605f26d23a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6d4b4e2318eb60c954f00d6a9371c73e0a6d667bf1c35d804d08b2ae5f6711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uiu-vilkukmbimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a2aa62978c3f4f0f5e80c6e55f5d25d69028e8917917e856e78f1e9ad7334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76101e7daec2c0f3c5cd9de41d33cc2da22b803899e23405deaa31678948aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsasasd-10as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b49225d154d6b433ad1d0b78cc0cc591812621efd8a97aadb22473d1851740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51f69fc3a44c6885141b4a76c92f6cdddf7b0631ffeb012848d9adfca1b4486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a37e717bdc29dd739d63db1d208a016065b5cd726929548d74514e3babcb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666b9c68a57017e77a7bbd80cb54c1170283a7468ce4b6c98406cdd924f2c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alof-danaik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2afd987ea58dd5442c537cc7052a62fac2a0cddc4c47577a8bff98a5c1103544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaiman-ania-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fed25ea223ff5f4d1f05c64fbf1167172073cdaf3755e6d377b197dc872f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cbf355535c60fbbc4d02a6de9fc7a829c64e69e2d441d5427ac94ec8e4ccdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd29e5f5222220ad05f3f6696481297953fe62304d1a7cef965948dbee79968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0930cb1e50c04b2cfec8a79cd09c396bf3f4343bdf1d6e5d855815384adae800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasis-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ce1b4bb7f00061318e014a85b4b6f9fa02e92f8c8a51ffd1357876b1763411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazhkofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5b9361bd2b69dc41485d0ccb281a42dc6646246a5c7ff3046e95340ad6d311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanamfmufiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d12511b61c27ebbf649a5be19dfa111d98cdc30a8e9c18488b77fc10d1f0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156571 Malicious code in intan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3352e16327f7d0620ee9a4109ccc31a3d9a7b5d62998327471f46c844efce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166053 Malicious code in slamet-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74d699601da6781f8f63eddf91d6bcd1dc1ec5f7683ae23f5d6f585ca1ca39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...