MAL-2025-162534 Malicious code in nokire-genji45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656f45b206708f51a823e3dc1c8c294528f818b1b52653d0e4e46b5764f13489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168235 Malicious code in tealove-dana29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e3ef28a1a9bef35fa53153bd0d88afd7c570aa1aa0665bf21b0f946cc0da57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154862 Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170195 Malicious code in uyafu-tudat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8213cbb9217719a78140f3a6193f2346160683b2aeec0c6e85648759c289e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166596 Malicious code in syahlan-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9986c204bd186497a731c3ac6bc00b1e2817c12f64ddd52f78032624b9cfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169029 Malicious code in tehah-nuia-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464bec2c4cf1e1adf40921540866e745d6e7e68216300098e2e734d638697fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152535 Malicious code in alvito-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33a726eb70cfb8fe85ffefe34df8852072d38f1098453e4032dc907dd426493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160890 Malicious code in munir-butya-tssyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d4f0a9ef3b70f69fd1fc3598e2702964262bcaf3af3d51969470aedac01e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164935 Malicious code in rita-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7b2dc6901b1e52d962b8365ed1c9790c1df7c1acae85f105a0973535af6078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155730 Malicious code in hariyono-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0182f87a562fb7d8817a494e7792ef7f1b9e7a291bd2e45423c7ea795328b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 872803af115fa43448205f76dc6e7f72e7bf4e69c65f2e5452d61042eb7e7268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161270 Malicious code in nabila-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e774fc47544d1a2c833eb62ed7c6b4f42ca902f070054f73df4d79853d639f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157916 Malicious code in kuroichi12-discussion-wide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0990336dfb79ea0c8c6dc3c46097edb0f01b281bd807cae4c7c770f5029a3914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe89db9f3fe7b8afa057d3acde8b204a5fe62712f7c1b46190bf7acf2c63314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1ab3fb5298ea520cc94c2b245dc80925d645513a0278a64954f7cf7d4c5f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012cc6e252390deec94c167ce6ee68829ad7a8c9d52b556771b98c5239e760ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pj-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca64e14f0fe2f163a0f20d66fe79655489febcdcb06eb10a91f45e1d94bb0e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ssghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a95391f099b0f6d20a2b6c2d124df05f7a9c7a80e610e16df10a620698b4b8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukonta-igavugafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eea8e6720c146cd8b2f62e1bb9b276ca1f79bc1026ff43188d7c0b6182248c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f208800206a499ce792f8702c044854e535da19fb0ca0a140f50b48533890e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...