MAL-2025-155651 Malicious code in hafiz-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68127e681d4f1ab0e058e8d640213b9ec973d31969ab4fd8c2aa6ba0e72662e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157209 Malicious code in jurss-sdd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b630226d079499eda35130407a40d0016b613cf98059bc31f62f3db7a2c598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152397 Malicious code in alita-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1a69344b680a0a8811b40ba4681350c7212cc3c4156f0f4e73cd33ff230d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166951 Malicious code in teagood-lokika82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b813430588984c2947fff87e2d2b660e1c4f746c1900c439655c2fea94c6f893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157071 Malicious code in jimmy-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9867f620c1501f913e9b575a405786a0f92c3a6963325b4e765072ad1e66beff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152277 Malicious code in alfiansyah-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e8c8a41b4b5d4e5e9a55c098805fea529d74c172a7092975432dcc1233d7e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928f5549a14f2b1455a748fb91b175573ba88d979622e4e3dec288ff792640ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f25a8949554335c7ee62f5836c8f26c7d7de67a58f7a2bb0591ebd1258eb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afaoti-urufuyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb51ed57ee0099fc2bdb80972d48b76c366f90d5e1b2ec9a8acb2eb651c4b7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa04eb3e6728887ef2dbd2529391eb495d5c35e4597b9bf07dec1add9593f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1703e7d2a5dcb7b50925220648e569ef3c724007284dd2eff9b6eee742ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df016ca6c111f993db1f946859e23f8dbaa89401339b8d05f059aa0378d79f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-aasaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c0b52cc65851d29db612af2cce78b598bea7bfd790a0efcb0192800c837884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50da9d3f5ba3179a4bf3bf0b81bb4fa7e889355e4a92d36eaa0df0deb6a5070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bdb5111e65fa99d697feb6bc9ffb22b86126cffe7747f08dfd63b1f1b00d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiaamoba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8635be479449471deaaee05f04f6bd07d7ac068a180a5aecf34cd51b6056a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5ddc00e4bf8643574991f2ca950f3f361b2d51e283f06213860407f19de5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e22fb2f636a35b7c172fb3294597c93a0e03006627fb3bb22bcce9635b0e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfaeg-naahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4db6d7cf98451c36e60a20b7fa92fbfd978ce67cdc2509862faa304b8311141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...