MAL-2025-166180 Malicious code in suharta-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931f15bb29f0f7716d1548cefd239d050609ba41cb686b28ddab597da6644147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160997 Malicious code in mursai-bdurt-ssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1351d0b500684d0bfa0b147ed52852ef8faf6d8bd350512716cd670d71b7e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164129 Malicious code in pilka-kalima-nulivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c832059aed0b70011f989ae212bf5317b18f55dfd591faf4a399ec4103e219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165672 Malicious code in saku-aku-iu1403 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bad0935bea56b0092046a9c3d7ba07073985ac611a5abb04338f3bcc802750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca71afee742e0e276cb42178abfdcb76420dcbc6556d51bc46332ec13a23153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-sea-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1befbcc9beb42fc21e33902c5284573425ba31360ada8f463b9be34761d727d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manus-tavail-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5629a416ea3e2f11c40fedff8dd845ba2b19ba3521c75713382248941f61e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229ebab54512e6e1397e36cb3175642185601f3637aea18c4f771f0cd03e2c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-muni-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f940cf79e56e3ee6a93ca26e5fa693d204cc218abcbe3fe32806eb667ade3b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e922aa71046de5364016b60d7b48b9459ebc1cb1e7e6ef2d879163bd1a91f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de5a4767e519280122cc5f26f36fae1a0039f6a858ecc05c9c5f81f704f3c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-sfd-ss3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6149f398396ff14fe931b9336396e0298a7610cc79f09ec7ec893fb015ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6435a39724fc11d72903aa0c8178dc872ba81e1dbc86ac9966a9b7246ea8943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2861283b509524712a834b159715912074a962171a410b8a8782e2c2459b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mursai-nuttr-sssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec8fa9ffe63f91580f3211bdc232db8ff3bda6dd8cfd8cb32c31d4a4626ba41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152544 Malicious code in alvito-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8243cedf8a085e0b878b00ee53c3409c717faaa93c35cbcc10a0790284235875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edeefd8a25dcb8e6dc5ed4c0a1c1153ba78f4fad38c0bae013b37c97f4e1bc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152764 Malicious code in arif-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9a059ef119eca1ab48f46e9b6b6357437ca7b94926f3aa3f1f156e1fe0b039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165870 Malicious code in shilang-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df1a001eb8781d8a540c582a7ea6586e00632e62ab5d87942d48eb60c342ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...