MAL-2025-166204 Malicious code in suharta-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95425fa8fa87c3acfbdc41744f260cb2c926fe47e4d820d8eb8dd4aa0c3a5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fead89eccdb880a74be8f3053b394cc603dcbb494fb0f25618a04adbdf861b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-0-weq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f388fd78050fda9a1695b94541f40547046b8817f7c4399b0d14e9bbc16ba2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151326 Malicious code in abih-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc8b1aa723507eabded2ec5889e74c1b234b656ea973b1f55927e682a9dc04d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163445 Malicious code in nokire-sekiya54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3744a867fd91624575c71578b3390ec2f12799a2a7bdfac05d77a3c6dc9d4268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158862 Malicious code in lookingan-namalaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e6b5a6946e656af345999f9a66b267e2d816c33cff20cbc9c5f108ae0ce78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligufi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cefa73b7346c5995f1ab14e30c1d91c737d30c55c75d2000189b5573ec899f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169465 Malicious code in uafaru-tuamat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ef082721b0da5c098f12b4b40a69cc03c713625c7d48d6478f1d5a2a61e769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777a65849b41fe90e523d5e77368c28a4701f3287e068c7bfd10b711e987ba51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c05dae3c6124a84e560f582b43f24391b552ad2c09903175f9819583a5b7a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/easger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5996fb7b7bc849fffb7746f765a4d8da6d76b5bd9655a2881b682d2be56401a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6786306cb029b5c6f8f9021b2130037c0dfea6419d76366a48ea2756a0c4652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153718 Malicious code in billa-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5be66402991b1ef8162f51e5325afbbb979481031178bdff731572de90cbab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagis-ifadifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8ad69a0bb9bf5213ff693164528ed193e8353d8469dde148d0947ce07dd656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bfbfd3596dad00381b505958db00b6b9089097d0e731355e487041c517ade6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnimas-iofagiggiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4dbf23229135d8d9c441aadd4bf1413a57114013199fd91a081fc250e46e834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puteri-trud-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dfd148d2ff9f48f78d4affe7d60c251b334ec6dc2dd42b5465538dccec467e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-nursedse-mantxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9d1d3ffc4f5830b63e7c248411df3ed78b56675fdfbaa1f619027fed88f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8dc98f280aa1bc8144e6b8f49ebea4f843548cef3f3d38fcdc2c7d48a606a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58d3d9db2d956fbb34dc1e09603e2728901a84b73c2cf6fd11d4f56eb55b2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...