MAL-2025-152116 Malicious code in aji-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c801f863a23d4436ed5f0736cefd4faf352d88c911f8802c714637be9ed94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156271 Malicious code in ilop-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cedefbd86e9e3fc160743282ad792c645b3c5551453755fe03a0bbe74c992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155392 Malicious code in guras-darusdall-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e3e65e374ee0939c68237de420366e4193e8cc2f06fc2dc4035f5efef8e6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170557 Malicious code in wulan-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec088bf5091e555d542897205341b35fc398ae9a949a12708ad473a47fa5735d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160198 Malicious code in masioaluan-ofani-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b8c645ecac86f259e474705dc272e0e1dadbd65cc29528edbbeef36ccf152a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161241 Malicious code in nabila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0469ecf0472465f2c8789b10dd1b9b5d00a0165ad425596dcfc2453b76eef8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamgaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35ea09437e132919b00a44951c24a69145cd83a571c17f83c40fc2310eecfc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/upjusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0821b2c018d2c24ddccbcac9bc174ffebee9d4a22d5878dd55564332391b920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3556d3480edad0653a8aba7acaa799ce63717fa918b62fee8697140b36eff49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ce3ab0e51f4212b9deafadc79c41fb13a978ac3e0cb2c780ceaf5414cae3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a9827e9709f4403fb6cc46ae29c538de2030fcad5f51d1f7c6ea0cfb00f515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8d5a2b46272c9b37f7bb1ae39bdc67c9cdc0bce7869e12d7475598c1c93043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1c864def7dde4d587d411651a32bc7e7d2754b5ff57c6003ff63d26fc361e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-ini-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832c1c99d14408568497be44cbfefe7c07de60e230a23fea28185bc516ca3e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf515f59afe9e6f444a7df859b0a0b5ada5cf6b699be3a599f16af1f5ea9155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofa-batoila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80f286f5197aff2a05c763277f44e9af7fc237a56e1284f646e8c96b54fe06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33161a8ca0ed00a68f67a981781ded0160ef3e16c9f42c044cb924e239df79b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8592cb9d262fe4d22835998f191c6a4fb73e6191f07cef475dc9e3037e4a7177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6276db66dbd96fea0f1b261392705d54dd842fc000c20cbdb604158235659c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27875b75c1fc91744752e50c1db0e22971a946aca6382664294537f726e1debd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...