MAL-2025-152355 Malicious code in alita-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0661892697ee8c21fdc19ade90994f55f18947754a0a6cb4d43671b79784fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157053 Malicious code in jelek-rasisme-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f49b7c7919ccd4c635e6162aef746a5d90ae775905b6a242dec623b11dcbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165811 Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167791 Malicious code in teagood-sukuna38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41bcd7948280916b16ed247e066f5729feafcffa521b0c1469f45f5fdced42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476444cdd5a63ec92769bd6ba2eefd9070ee1c7728174e1f0c2e1d83af63420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9605787338a35cd3b784962dedd66d189fee87fa05d49856eb06910a1531a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/gfdugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd64593c7b2da61f5171f07b972d1258e6a4468e45bd8cdee01e1434ff464559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f912664e2365ad54106d1071189f80e26e78af667aaa70e23f1975b57b2fa88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoa-ifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600aee5ea2ebe0d4e83e68179f6d45632834954686fde6f94fd4aadd0a2a0cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788382c695f65858c2a636aed78176e126a7d9af61c8bd93effb954574a0056b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7defc4f96e63f5331ffb36c524f682defbc229f7096a21db2b45267f355d262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcd636a261d212129275a49dd602623d45fbb31d2ba96313b1b23015e6234b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugymi-amamagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6c4a2c3369205fa54145bbeeedcaa28638012181503e49ef22e38b5c68a7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b08c253acf662ef81ff4f65ebd5a06ad20e0abba624aabd37a0ca3eab098bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-nsdfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb7f09786929186456774995186c7d94892ab148d9e708b0808d5204fdde9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lothi-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d0abf7705279b6948cde7de093b3db4bfa9943998cfc5d79faecba7b305746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74128e79a7e5ad8f37ba506ed1087599851a43b5ef544ff1bda561287943d3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymeria-butaouper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13569a1c450de2624261613817e91f0e3c57e8619b8dc3f3d7a14c3e41effd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f465ca81e34735f01541f0935b053cad221a60353f83c064e0ce21c63a27a839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3de7f552b85924b5c9ac290213ffe1560926c32a8b9ca9d6da96b4152dd6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...