MAL-2025-155211 Malicious code in fitrok-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e275852449f7f3f1764982f640c290145e4bcda078ceeece78c877028fe9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159784 Malicious code in mansila-tdhfla-magai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d12cfb5846a0e69211a219c1a5f3842ae0bd320cbd79f7e88135c221623e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163288 Malicious code in nokire-nanali35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5141c4376e13747686a5399b8a4dc1c53aa3f5529c29b3347969af9ba0e7faff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159547 Malicious code in manaf-yuaki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff16c986e8331211f16f587462c753caedb15998aa38b48b1ada13da0c27016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155446 Malicious code in guras-nutra-nutapasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e81b2d863323065b4f912589924854c712f4936048d9d785c40038a2b0050ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161910 Malicious code in nasrul-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8f87fb95eb540d108fe64cf94de41c6312e2547c601922a67c610234529078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152336 Malicious code in alita-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1e15b7e9a5802cc83a8c27623601a6e1d65f941c5c7e63598a3a45f98a79c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169259 Malicious code in trevora-cir62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa631775d7323864d12114c94b3d777a18532d14d7b14f82cf17bd0a38434369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160813 Malicious code in muklis-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e78bc4854daed77473f263a66b8f50e2a536f8e6c9b0d54c1e28a66cc2d484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166974 Malicious code in teagood-lokina12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb613e57d2d67075e98c2c6a3c958c0932b15fd13274f667d2d0811d33dfdf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157889 Malicious code in kupai-lukta-jol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03857ae9573bede240db67e663ff44d1181a566b0922e4a3ad9d79445c72956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168527 Malicious code in tealove-nice47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3717374ef2ab133e5d15dc84248c695c314f82551fa655d7440531b8c6addd37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168936 Malicious code in tehaah-codfd-mutaari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe33c92afdab5e6741a4f875efcb7fcf4896530e4191403c5eac467df614222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256bc42ae12b4b65e0daaaf20c78bedc9fa3e40eadf31ed86df20e08ce903404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8865cf4804a195797b48e5ff6bd8f4831d028de3e4847a96270f51dce87a77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d21f7d884f7a322121b41d9153bbfb22a996e866c3f16d707ff4fc148377fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a47a2516f3831bef0020f5287044f7d9e6e4b1aeac0ef1e50c71a0732eccc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sordadi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56b933173bc4b1d6f3f79c6d98bca2badad50b9f9af0f26740afe5b95f1d0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50f29662df13cf547a5ef90ec1022cf38fdff12eb906893be507ab043146afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690d38e22d6714b1e68bcd52261b2a157dd76e5d8d44bf09961a0564cecd9859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...