MAL-2025-155775 Malicious code in hariyono-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8e3b73ab7207ba4bdcb56a75f673c78c1e7173ee6ea9c46393a29e44463dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167315 Malicious code in teagood-nakamala5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0126052f54f50077cee82437733dcce358b785e13f4e978f7eb9c7a7729dc91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164053 Malicious code in parwo-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c66ce7d99976a5179b6e9b40076897cf0cef65fa4700190a7274138ea41a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154826 Malicious code in ewa-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffa15bbaa54e377c30e691241fd8504c805ba9ef297f67985107db02da976e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-jastfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772277d51f142cf8d093e1d4b7fa3ef82cb32d191ebfdc726faf33f064f6df40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-auruyasta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e455c4065ba50470251df944de29297b432188e52fcc1c83c697058e125155d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165146 Malicious code in riyanto-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976accd1a048d9305fcc3e63a55b5f44257a19f18d44d52026a5b7c46ad62f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/imb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 119108ab6a63eabd17dc81dd058b69fcb3aa67fecad84207c8eaa1517e3b3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafru-tut-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4191b63f74ece9d6a182c6482da7bd2b1461432148fb8f619eee86fb9f9537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162734 Malicious code in nokire-kore45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbdcb24cd6a9cca1445c4a1c63bd0cb7cceb9f0c0a5318d7694faa277360a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151013 Malicious code in @miptaa02/weaddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc322c8d24bb785b79bab067052c9eb16025ab2f171ff58c361be32f9017a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167974 Malicious code in teagood-yakuza18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05d734d7c2dcb318bf35600b27f5b9313f5a9a755db7e821bc19b694a1bd34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-21-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eda268c16ce89cb32ec3d7e75e3e59692b6b847a8e63d1ff8dcaccf7261b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e23413a4066e6c5aff52381fd4d2bf77a4931915f5d7a6500af8ca4c0cb5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152393 Malicious code in alita-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c40d13c905a5c7492690a25e3f86f827ae5e00e91cb9323c51902d7c5b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169202 Malicious code in trevora-cir146 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d6d9c9579dc1451cc6ae61ab0b34881e32bdc7a5ab01079f302b1e2ed552a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuati-vesa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3cb03a644f203cd46dda04be7ec612544cabceba444c4941354dfc0dd7ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3f8b0a10c3fb659890bb38c147b0a000f948a7caf68e84dcff7360c14fa9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gota-jamana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2290e77f0b677e85ff72ea7401cf01ad6fa41a56cb1db3089a7484b21b054318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157497 Malicious code in kentung-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d449bffe08943f1f7e962a35f4852e4c20ccde93d158062c311d6e28949d860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...