MAL-2025-164842 Malicious code in rinto-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66438272c851678ce1d946725b6bee6212b2450b779ef615ae7fc2c4d362777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151434 Malicious code in abina-mibiian-upmmia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1779d555d637d032ca22edf5361c68a083135aa978f26f51511aa3889af63f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150943 Malicious code in @miptaa02/senba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7badf20708abf487ce49e3f553512ecf56c80a741a1f10c789b681c1548e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163514 Malicious code in nokire-zabuza26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b8ce693fb7fd318ac8130fc770c90de9a876ea7dbe3d5c18ddbe5f71fd7414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423e136388d925bb923024c333d08cbb499268cd7366e752b5dc57e9395e0486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-ikaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f6affa7cc294a242bfe67fcbac8f2d2eb9948a60bc480f0538d692bf0137f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491cff21f8ce0311879a1be5c12447043e7cad8dbdd82b08d85e56e2c94cb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nai-ign (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7ebaa7e9ccae0ef368f771e8018c70016d03578f6c3c48c3d113e809084b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c094facace878597ba61fe7fa757972abcb40d7e2b5ae85923d44f54e61353b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85635ddcf712276c1fe004ce006af45160038bb9c48201318b75518ee9ba1eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bufugabafit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5e5ec35c43dce9fd1a670eee78d10cc89e832cb88e5c45558e0e435825d8ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163466 Malicious code in nokire-sekiya73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad1b6de1ee92350a7f13db46b1ef3004eaab8d49bb3def002a5b1c10039e92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167606 Malicious code in teagood-nalikoli50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca6786f536c924fb212b73eb379d5ca8e38214339455fe44535133b8c466863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158572 Malicious code in lookingan-namakiki6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9279a3c4d3240d82d4847709637e971934f271fa4396c03fabb5db6f55b186ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165243 Malicious code in ruji-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36d478e712fd5295ba60a77f59a4cc4757f55169b340255806056a244af9bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153690 Malicious code in billa-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c64c8b40d6b61b2b235150da6bb96c837a4cb9e8ae0b518a46bc200e3e2985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162022 Malicious code in nasution-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9f0804bdc88db387b21bd140edc97b9f56993a3aa1023093792b5c4f16dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-canopus-subscription-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b87c7c825a2db18e8c130977e889b347093d1698c32df204faa36afa5165c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-taurus-achernar-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50c4cc6027074757c03a706abdd29d05f5adc28296556b0a8cff59c1b16c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...