MAL-2025-157619 Malicious code in keyla-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16674821d954890d5fd5f661d33bcb8d4f7068b7588e9ae70ac02f2f07bbbf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162183 Malicious code in nokire-abimanyu67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc67313d970bc0f2459076fddb65adba8250572ca4c855e159845abff20973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158830 Malicious code in lookingan-namalaka20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936dd8da2e49010bf8bf616f3711203587110375d43b77c241066e7bd84fbbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153939 Malicious code in bufpani-mau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bf26377b96e31fbdd8e6d7a25cbe3486e7e3ca9861797fb64fff8d26366a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154408 Malicious code in diago-kamuli-lukakima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be23cdb4b3581bdd08f627f5272c28d67636692ffebcbb39190b2c8a45171368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c4904389c1a183c0c6909683c229b0a756c3ff63fc5c1934cf5d41846ba589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde445b0b549a21233663c2d7177651ab3b0231226c6c95aaa4fb4a82a5f5f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uasuafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec539321097dbf8a204f56a87751dd63cb2f7ee79e8f399343481a816116ed51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-itu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32fe7781cc8e926b549d0f8cc9c2b9da4fae001d083b176f6e5abf315894ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibiuk-itarnia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d343ad326a8576f9b59261c74e3729adee55c9f0a510eea65ae234ade5a327a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b952c7fdeafde2b724e4252c55e9621d07b3c70937952ac2d38e4b7c4d72194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307446c527470b012893b4db586091294de32d852901366afd20b4803d44feb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8782464b1e3666d619488b3b3d552e889bba4d0147b5e7494668ea92ce5f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kiulasolai-akiavabimako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02c48911fef487ee625e6002190c451e9af2a230cc77244c466552d7df1254c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273e681c6ecdb00aed1f8f73fd1e0e412e6fcbce747a0007e3b82bfe5864e359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ef01955e3e78ad3a34e9d32f88751272a44f127ca06440ee833dc0fc86c596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-figa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cc9c731ede30beb59dc483904da696a9674e1ced0435e89f1622d0a2eeb2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ef139d50b97f982a8449e25625e946b5f147806f7cce9b39ebf8fdbcb40218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0439168772c2786c7954b6ca39a211b74eeb233b73c554bd0b3d0cb4fd473e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranfu-safaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7b55bd01282fe29860c457baab073d33d51177d26819ae356e9141a26183ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...