MAL-2025-165059 Malicious code in rival-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27170950046e1b89157c4754977140083c9891e0618b711223a29e62af8800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155140 Malicious code in fitra-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afbe85d4cb67484b6c0503929d72d033b73e892d99d8059e2efbdc37a542a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159178 Malicious code in makan-aiga-fiufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490f8c3a2e7ab2e7c08d73b264d1ba093d0d8ea08aec97119578012192926f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162101 Malicious code in nokiraifne-asa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b730e605b3c0d466f0b5e0e086780a7231b7e1497adf279ba27cb04d517be578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150651 Malicious code in @miptaa02/fis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed5b2e744fbab740cc611dc2076ef5892c7490d9413a61436027bbce597c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154230 Malicious code in dajouka-trssusra-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c6a8db4c3bf37ba0511166b7716285d7ab2e8a7a26a59ac1d4d712f395d9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-doigoafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a406f901eab9787998e3c233812f0d1e4e0a1589449b61189b17929c2a10d280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2b7aa4271bbbed6a25134945f1458bce7930f8b3813eb6d491cebaf37ce8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milraoa-miodp-muiokp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb924860afc40dbf8f30472af6a192c9051120fec89c551989c9c2dd654054bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ot-uofigapfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772b905e0599a163ae1e4aa9d0c4a0fe79bb168a896638979c4096b80cbe4d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e81db8634f71116ca486b53ae662de09fdb1761eea9a41d169e2a5fcebfb635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10421acf16619015bc867ab8d27fec06690b0b5643f0c4bc7e5c2edcee0b43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24898d7046e79a85cd5910519c4ca4f24567b60198711654575a3516ab0590ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a80f9aea42d0c71851b033d277518942d8855f244f3529d8c513cb8bc61778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642de07dac424184be3333b4eb486fff6b8e3cb3e1cffa9af839ac710e0ab217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8732e27dbb762fcda03d7804938548cda64fec1be2e6c253403618f70586194f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uikayanabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6418f095d020e4bb8935165e54c949e69256b8ae5af89dfd65271aafc915119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e62912b9c68b933e52bede732bc5ef8f8063204d3fa4650c066676dfa37b4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mehncal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26fc8ff838cae49f97343fd64974703c99e782425aa4481fd80922b7cd5b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...