MAL-2025-157621 Malicious code in keyla-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f3f791359f4cfae22d7aa0a844b686dbf1ab802111ebec15be6d18fd4bb7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150566 Malicious code in @miptaa02/dffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8e0e66de984f3d7be61267b681cc1b54056ef14bcb6e6a36b49e025c4ef541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162055 Malicious code in nedarioda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c655abebb0da065c59a0024c120f84dc728b6b0d856708af4e561dba693261bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167462 Malicious code in teagood-nalikami60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eae227ca6f9405f2558d9be11ac3e79382c3ff0a5a40d75a75f4a807a42b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168064 Malicious code in tealove-aruma10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f3903939235c461950d91de9381eb0f7defc9ce227e11a8d8b0e2fde0bd97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164992 Malicious code in rival-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a53ba3ecadb935d8b46975475c9c67e1efea981a035d86532a2d7d77a7a541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158892 Malicious code in lookingan-namalaka77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc29df0c72e26e3f445ad750d88531b62401b2d0d825da38ac37a21cd8d6cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151094 Malicious code in abang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa0c80501666e125c849fa701515b70a48537c731e3939c5b3cb777e5726cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151960 Malicious code in aibopuna-mobile-araoionabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c459c4eb4ad6a2c94b3760cead2aaf87f6abf9831bccf5e40bd47bb66d8c010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f1b3f4442fb6f674433fd549edd3e60dbb54a80dc19ecb97659cc86f80279f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624a3bb1ad494028c57ec3a75c3f6ae510b13f04af44a2e50f0c664f82fb12f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/bount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39df34cb47a4cc317573190ae078baa3e841cda41f451c1fc85cd3cc8a461e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofoayif-mutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f109cd9ac5ad18e788f83601df54c74f4aed7a0078ad4be3b176c7dec7adb22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofa-doibato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b82908d2aee6263bfb23ef8d19d1b9ca100bb4639b50c6f5eb6654de7779e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fd55ef6f15cafc92563f91fb7d12e01fb91b313688e89fb3613cc81ad3f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyaudtu-tyut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4905674c56722c0cf9ad34a12a419ab9685b3c986c9eb336fa1cd3e06fdf51f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2273c461a9c1dfb10cd895c816c969c2534c28e7da61462b121bc8914e36132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167913 Malicious code in teagood-yakuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bed30494a9acddb6dfdd32041df4dfcaae155938b671ca9031ef75089d9b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162977 Malicious code in nokire-nakala25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd87e81602a8f810bdf265cea5898c2da5af6c2e6aff4c34c3fd80b54facca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154119 Malicious code in cinta-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9276cacfc714e93f443945a7a137722671d71c26b6e26cf7ea040686638f86ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...