MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168615 Malicious code in tealove-okta37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511380a2f0df780d4fd83bc19b5ba5a41c6d7dc1f90a19c81c7c3de087d8832f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a346cc64835fcdd33082f22a49b24f90b5b6207a74dc74ec7b5e7f3b3678f4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanukakubaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293d2588639aaaae436852cab30c97d424869161aed620a9532b9c7a4d004e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e22fb2f636a35b7c172fb3294597c93a0e03006627fb3bb22bcce9635b0e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928f5549a14f2b1455a748fb91b175573ba88d979622e4e3dec288ff792640ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-ifbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c184eb94768000d26e09da5d4175a39571e54bd60c2e4055815035bb4354c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1703e7d2a5dcb7b50925220648e569ef3c724007284dd2eff9b6eee742ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0be0ce3d261c583e0120c8f6f6cbf5022b47467c7ead27355f3be4863a78c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898872a7865d276ea81a9257ae122f8029ecbf0865d606d0ac1079dd34df8a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5ddc00e4bf8643574991f2ca950f3f361b2d51e283f06213860407f19de5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0bcd01c87e711e9bca57585e5a48a115dba3355a7340dfb9779b11d8c58fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46f959d6d5a298a7fd873c8dd7f32f0a75456184a819f9a486e33cca2841196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-aasaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c0b52cc65851d29db612af2cce78b598bea7bfd790a0efcb0192800c837884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df016ca6c111f993db1f946859e23f8dbaa89401339b8d05f059aa0378d79f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f25a8949554335c7ee62f5836c8f26c7d7de67a58f7a2bb0591ebd1258eb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c953f36cc6a144324377914d234f1223403c24057cf3010ea9b2ec2b3b09222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyilud-vamunauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3714fd5f7afe579cff0c0a9f0a67a659684bf13c83e1372b8e02940db3bb79e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e935ccb3b06a6dfaa20c831bdf1dbe0e442f17ceb8f4007e7e6ab9d54e00e6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a523562d60e1da58de64f80041dabba254b5a6566db091dcd153132ad1e7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...