MAL-2025-166525 Malicious code in syahlan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6380cde13a406696fe8594661170192697769ce6129f4d3178265c24984b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166735 Malicious code in teaa-reborn38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758aba44f676a165a9fc041a44db6156fe7866f16c137555a9cf2a22ca7a75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160377 Malicious code in messi-tutda-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9da3eedc8cb1b54a94187fc39780e16f3622aaee514c136bee7598f5ba5075b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151221 Malicious code in abia-avugi-aninah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37fa49017fedf8e29db9614ca86e02486940b169fee931e68d1463b42cef4920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160713 Malicious code in modirai-igono-jimafagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a74f8a828114439eed682db5964cb55f4f185418efe6f8db3374c669c5a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b6865b2a63696e95762bf9c786319a43ff86031520a5e69dd73b9d60f9413f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-suftiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d989813d1f5f08524c902513c3a30d6ce68ec67ca16ef5ce16dae215b40aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76558d63b5260f87c983c22e898b60e7ad327d5ccd11c631d14eb92dacab8900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce02fdc20886b38a4bfdda6b569852a813869100a6a868f3fb1fdadc667f65b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-angi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8ef2387c9a573b2b9068e9388b590e169af8603fb4a3dc403a12d87864cf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dofaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a2f9f3ee0dcf77dad4d4ca2fb03ec6b1a499e71f24294929b46fa3c3b85b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alonbio-toli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff8558c3aa01d54422862d8e610da5b40ec57f36455ee5fc58a455a5df3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhayu-taia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418d0ac3b0ed14ed5f7d57d0eaef8857ac76a7fd7ac90b7fcf8981ea2c24ddf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8667156a17df0324e8acb88eff706151b267373dfe5b34f04453e972a8667007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4748973cbc1101da61acd6f73f0e3efa90a5cb0d1996507e12d8e1d31a2787c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efa63c4f5345a15a91dc148827a788a6fb60935e5c48f1d32ed4e71634a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9a2bbbfc906ece3fd815309187da9050f47705b38df17a0d0c3ffa7abd23fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab4b643cb19e67ba546c21d673a971f9ca17a7231ddfd4bdd166404ee1cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...