MAL-2025-163155 Malicious code in nokire-namiresan96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbf16f155460c855ef622824413e2e49cd09f9434faddf670311f0dc749779b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152029 Malicious code in air-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70902ef95f5216486736aaedc05d335c6ae9f52f81729832bfea6e21b99af31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152277 Malicious code in alfiansyah-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e8c8a41b4b5d4e5e9a55c098805fea529d74c172a7092975432dcc1233d7e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154026 Malicious code in carv-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f5efb54dffe3e8093211f6623f4e521fa3a1e350723479eef0780fd6b86ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157209 Malicious code in jurss-sdd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b630226d079499eda35130407a40d0016b613cf98059bc31f62f3db7a2c598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfaeg-naahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4db6d7cf98451c36e60a20b7fa92fbfd978ce67cdc2509862faa304b8311141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-teshrd-naud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadc835e1ef79d145232729dd133470af89bfcc34c5cb76921c5832a6e26e68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e935ccb3b06a6dfaa20c831bdf1dbe0e442f17ceb8f4007e7e6ab9d54e00e6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsasasd-10as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b49225d154d6b433ad1d0b78cc0cc591812621efd8a97aadb22473d1851740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46f959d6d5a298a7fd873c8dd7f32f0a75456184a819f9a486e33cca2841196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240a49610b358214de35a97abe83df42d7d264c6d0336c52636d89deedacf33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e22fb2f636a35b7c172fb3294597c93a0e03006627fb3bb22bcce9635b0e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-nuivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b697bd3293dcf4b5be56694d68bd714487c35a22b0345195819951a970f9eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-pafoa-asiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ff07bb045417a3bce3187acc08944a6db8923fb90adfe30f481267b3c16301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928f5549a14f2b1455a748fb91b175573ba88d979622e4e3dec288ff792640ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa04eb3e6728887ef2dbd2529391eb495d5c35e4597b9bf07dec1add9593f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50da9d3f5ba3179a4bf3bf0b81bb4fa7e889355e4a92d36eaa0df0deb6a5070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nulamn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cddcb41b8bfa9c4fe410a1ad729d966a77aec1d359e358f3dd81db966d547f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyilud-vamunauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3714fd5f7afe579cff0c0a9f0a67a659684bf13c83e1372b8e02940db3bb79e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac7c3a75f346a6ed26fd294ebaa0f9d1bd60a1691585147a67aae8c46d02fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...