MAL-2025-162328 Malicious code in nokire-arhani18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea14f1053cdac0421a2997157bd7044af76582130ec27284b4db62ec97d86a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166053 Malicious code in slamet-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74d699601da6781f8f63eddf91d6bcd1dc1ec5f7683ae23f5d6f585ca1ca39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151500 Malicious code in abiuna-mobi-amuasubia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a1a6de03a106bbf8fe8aada29f0d787829c00f6f734f6a59af6ed5ead6859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166898 Malicious code in teagood-lokika34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6823c1d7c661c07549664027808636b412fc3739da6d23af96c2ef3d2ca070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156571 Malicious code in intan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3352e16327f7d0620ee9a4109ccc31a3d9a7b5d62998327471f46c844efce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169025 Malicious code in tehah-nadas-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c8b1dcc6c24b8c421122e211dc5753fe415388b8b4dbf7693d2f5580219a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154811 Malicious code in ewa-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18996625eaea5a66117e7beebe129a5473ce87012add369719563fc0db40c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170543 Malicious code in wulan-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd72f48b745a7fdf7e122adcc7ab8ceaf8e288beef0c0f5e304b32b12bf767fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164773 Malicious code in rinto-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7ab788ccf7d030377efde3f8521f58044ffb1bb267a963a64170e3ac045c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152735 Malicious code in arif-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595eef2c5c8f3a35f87b7137436511610bfa4750e62f01c4c381dbce1298fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-mec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fa9b47869c28dc4208e7ba320ed63dc746289c75553c6eec0486872ccd1e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1003521e016ad84d5306966d038fa56fcef3e074e3a00e46d6383d10ea7f549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beea29a05c6bfb0342d94ec10bda3563e29d9fa19c7e7b34e5ad36dc058341b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanamfmufiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d12511b61c27ebbf649a5be19dfa111d98cdc30a8e9c18488b77fc10d1f0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a37e717bdc29dd739d63db1d208a016065b5cd726929548d74514e3babcb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-arai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94c029f1cf86f8d3b1e66963a350386c7d3d503b722dd369b91823b462a0c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cca7df148f1f1afd47e05ef5fe33345439856f44eaccfd4dc5121f957da2958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f408d7857ce4674b0ccd5edd1b2ef841453d6c0816ab5618f2eb8681da8b7b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec01cc880b35949afa1442a6f66ed3f58987e10db755db4d36f61b54618bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malikhafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebad21415e8b56a15a31355650ef3d4a6c3d6b2419c7ec0ac3aa34d1980836c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...