MAL-2025-165888 Malicious code in shilang-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd94d2a86c197a40bdd4d6ec4e4333985d5974d467863747b479ad93a8a99fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157064 Malicious code in jimmy-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3831f95f6c886a63b570e366399434ed2b8cf8018a6afa2a608df475098045b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150553 Malicious code in @miptaa02/bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437e4049a7a387c1744ccf8a920fa0182d62caa8896a0b266deb69a034fd0fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155715 Malicious code in hariyono-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38ac1dfb44b7448a358d3f8597e767c6836e9bf10539069821636a592a32023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164165 Malicious code in pilka-lniu-kan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a164b3fc582daff60e5f37a1783a64bd147ce5ff27a28680436c34b86be6d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162941 Malicious code in nokire-loklok83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c8d7b13449d3235f07bc6a9502fc3fb950f6eea60316b8e3d062c0cac25842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154527 Malicious code in diago-kulpo-lukahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6bd981bd936913b26a989c37a93a1153ad9f1665629e7a7bfea3713caa2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166846 Malicious code in teagood-cuekin78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8b67e02f4449030bd2a7ebe066690248c640b513a65be39f6b80d9ee6331fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170150 Malicious code in upilka-luzimub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24daf3af81308bfd58c399af0faeae21684f0946c2d853241b735e2ec91f161c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170014 Malicious code in uinsu-loti-bnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3dd5168b79d6dc708239220cfdc9b4fe6714abe59edea13982a66e418093821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626aba5ff66d2917cdc7be9dc51a911dc328d6e80dcbc21510a4034f3107fd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nitroacer-teajaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000ab5e1dc60fc8d5ecc2e747a2c89ed86f2b066c74e2f83ecd1b85c674725fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-babiakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26136167d926857230b84a5c7af942416af7c52d08921fd20fe9bc6a3ed7c507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ac3c3a244cad8c7c85e047ecda955fcda0072dc85e03acd61ca6492524726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisbutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff051415ca3accbb6fc083bc8f13701fb4a21b07b4f9128efdfea73dbf81a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17e4a4b7cc58d8732c45ecd43f76bb9edf9992134f33b3baf7071e1f27d3689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/icdgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5c062467e809e18788002d26e2b0dd12d053f8a8609bf1bea2690fccf0c48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1740adfd682b50ce078e563e0c89f176aac5504ee85a73245751c28bd38b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pgfsa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f13f098e3ef3970f70a2ac6c446de999a0a2d5112b06460424e7cbdc2a9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alao-mafadiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053a313b5a3ba92638049004049563cb2852b499fff8efd3e2653055badca1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...