MAL-2025-165785 Malicious code in sau-naki-upside (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3876731e07c5c3df6ccfe1e479202ac3498085bb76c8d856de42ca80c118e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161914 Malicious code in nasrul-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43cce915755c7bbcf934f6855380b6d75d2a63db88685c56ec53f072a5799fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158967 Malicious code in madan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfced514e6ac9dc6c5b461180b3b84b99a0fd8d2060add58cf321ea7f6916a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156096 Malicious code in ilal-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fe13d0ff1031b7021d66ed2a1f5c73aca1d2bde28d23e8d44137d6a68c5306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159784 Malicious code in mansila-tdhfla-magai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d12cfb5846a0e69211a219c1a5f3842ae0bd320cbd79f7e88135c221623e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc04eb44ee43d755bef265dca6e73050e6f0673db7f117e07f932ddaa28fa97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc3109290e0d5fc39638e5797dd50499fb40a2108dd9f00bc13dd0cc179947b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d7beff86eddd5a9a477b696907126110feaf9e8c93575f339668c630c9d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5dce92f973e167e33806e6019362f1a8ff4c61bef884ab37826f90b9f6314ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d52dff9da3efde3350f730b96820aed97b368bfdb634a4103d8d1068ea6f5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79f58a5de1943c02ab3b84f06a436b10859ac8f592c8f5130772f10225b4541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdd62d07dd2235ff3d4ac01c8c39faaab47ab98f45f8df6b767adb565766426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aab8435580a10370f8f367dbaab82a5470eb1d136c33046b08ec683b658742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cec76f6651292a9ffc892f06011fc12b5fa459ee8c56a2f99aa48ffbf32dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-suafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9283826942fae70804a593f5414691f64899ddbe80a04766817f7bd379cc1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044d508dcadd0f2e8eef76158e1dfdcf8b6a7c0e4b40d89de9e66feeb81f11a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169375 Malicious code in tusaaya-0asds1-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e942fe5779020c6b9fb9a33307009fde4576a6fe4eeee608441b8fed0bd285ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155386 Malicious code in guras-asia-vietna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dabe0b3bda2c010422810f9a12829c5bca0a0cb1f1bd4f1c3caa22e1623b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...