MAL-2025-162492 Malicious code in nokire-asaka9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d8d5c74b5e33039bc25120376a5927ea1f92b3093180ccb645e862172e84aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164664 Malicious code in rino-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e43266ad5a7c55c18c8520c699f4fd9979bb949f4e8e1fc79c3b88fe0d8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155509 Malicious code in gurs-grandama-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9faf36be34db9808eb7a5be3d5619ce865785b921240df6cf92fc72520a4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158107 Malicious code in lina-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51970b0eea68e34d3b18a4440f946903fdb7034bcdc8de12ea0c2bb2cb696396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154681 Malicious code in dioago-kamo-alauliaahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a272aa679c77568b1c4a0328619abb368c38a5744d6b0cd34438b07f7edf8bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce31525c76fcc2147de87f19fb8d71081764813becdcae501acc7fc51d453b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gfobai-jigugamafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd1ccb86de230c81f9fe0105851dd65aa4753b386f53afc8f0318ea22864bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afgfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfd1ed2553ff2b267f0dea3e72ef23cb749a6dc3ac165ecdcc54fb2449ab000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645c3f3884e6491820cd530d6214bd3db8e3690068b729dd532607dd1a60d629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asi-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7082c4992170ad464e148c6c23338bf096d4735eb4b975c35fb99b8a73d4487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad48745449c42b148f5c962f319e4b4b70928879fa1a5c594a7372aa2d9586c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4be59ec46f4fd8a220a0c5d545418e7ed37920ea62e05a18c28572ab0233b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iynujmg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed06ebb26694b1fe2e82d5c8dec2fa638f3bf575d319613efe4d0eeecb97fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eed29a35846439c5182e65b2cdab96d361a4044b469dbf9299cb7fceb8d082c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2abbc39539f37fde0447fe43155b7accfc594b70f52896ae43776285c582de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5024b100aeaf5fc3648d78b6e29515e00993a8765935a02aa2424cc5d424fc58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b74bd1008f39f2dde70529f17818bff5b152dc6375508094c70e8cf2f7df5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df94e70c2ce62a67ec88cbbd2b3fe28b851fb027a7539447b946312fded4652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728a9fb2f24617af68eafa9ff696b5f16137d09c7e5fde3cb937f82a3ec16c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc34a4c0c4fd2fc762c5b72de98fc146aa50a751621a9dda19250eeae3d99e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...