MAL-2025-163190 Malicious code in nokire-nana37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927da8b1676c8e898798278bb4127e9e2e17e91b8bbe3e41ee2d4c014e1feff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168513 Malicious code in tealove-nice34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b33f6d67d7bc0a181c06d34a5f4bd297240feb8f5e5339ac82f7578bcab978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152449 Malicious code in alvira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc805477c2e1712991f3cc6659b859cd570b4b9205b2348649dc60f5abaa8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162078 Malicious code in nokiragne-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d0aada02833a9d4238e31359e16043e4d60bae4b6f6edec329d6db62bf5830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152237 Malicious code in alfiansyah-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6768a38c49c9f186d0feab6f2b5a40a969afb12c440477b73c5704bf6e1d3ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160783 Malicious code in muda-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f496862ea8e4c53f58f0665d8c4920f669f09784930187484dc220bde8500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-nosudfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f97c364c2a0d96e04dde7ebe2d31872c0185f001b8a9919f80f478b2254d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165572 Malicious code in sabuvaukli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc104f6536dcf172fc8af1676dbeed8221ca06862b2a13a8caad216e5956e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9079fc9efeeae46536cb6efe069902b182936e0ae28915d88243a86c8264fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157657 Malicious code in keyla-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6e8eba0bc2312e3a3720c1b00c6875ad71c52aad91d701c1f44f3aacc053ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9b3bc91d824dcf8883b0f56f93895cbd9feebe6985d3973ac1794f28ce1b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfb5ec1899d2b46e303cd3b7b5605bd95ad262196ee751209e650dae4ed5c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaika-kaiuablibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73641475ca02e679f77691be20a2c71871fd6679d87b26db746e6786068695f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/risdcde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512a673d7f85f4075cef43e545d0e12021b4b72db7622d2660dc3011a1a2b645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a3541b043116c7916462b9b06426a3205c4e4cdfdfd86a380ce11abaa05cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7645b667e4727ed5659ce46c9792ee4374c9b2252c0c974c0981a2d891a524f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-nddyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca36917ee06b4ed2af3056650c537e673cee758ec8bf5d6cf18a1d5b8c3d734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810610c0f6c7570e320472cb52d22105184b357fd90a0b71b6873c5a31974831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583e9463a2fb96638c882668a0356d39458d67fc2bd26e7da25eeae3a329c256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uylud-vamuiusabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b735e32610965623368fb5f122855679c6dc8c72d3c27dcec588a3e03fcb8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...