MAL-2025-152756 Malicious code in arif-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c57a89dd5efd6039fa90c8a733f3afa8daf84f0cbafce939ce95e1e0649ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159629 Malicious code in manda-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af0b495eb8e5da519a1d76e2e6109a09db2b702eefbff041a6adfe0bfaf23bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162862 Malicious code in nokire-loklok11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b9d1619fd2afada4572e4ffa9691fb2d85d532e354eec8443550c2a061e392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152422 Malicious code in alvino-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6287610bb2197273311326c2d681c944c2ea76fbf15f0eebeec07c9bd5ad2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166699 Malicious code in tea-osss-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d0d9bc2e1ddd5d34d78485d00eafa0cd62cd981cdbfe22b1f4dcae14b46f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167392 Malicious code in teagood-nalikami119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f4d159dc1242f35cb84d1c93eaaa7f74b82794381d4e0ad74cca05f391d5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-mitui-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac44cc401f29535c78d617fc4ad6eef42d566ddaf12fc8a0c5db3d61a45cc5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdea5e7f91789f439d0e662e550b4c560b036cffd38f5992178d14aa317923e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lkui-kagbdsasdgsdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602b9ece1625d2571b4a39ba00cb3cdc6d8256e9b6d8616190c1006036f4c26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ce5a68696053874082deb9e2ea0105f068fc7337778e8b8c76e1447c55b2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madasazlohiakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b227f2e550178f8c7f1f47217fa373b44ef39832c39bc307ea7164065a3d4568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f177e27bcc87a709e665deeb3b05d997da6856d91f6d02c30d215fd4d28062f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9df994dddc7be6bba312b31380055943bb5770eb500812a24d768de7985b163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-sdss-tdessrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4144a5f34a478af95eca9d32282db16dd2be53f69d03e427512a6671b2c02f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff81641f8d84f6a3dfc626cc44f75aef98f61b3f3dfbc084a89620077d2e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161366 Malicious code in nabuf-oguuof-dufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04055a45849a42d47f40485d6dcb4b6f45842ca68f135d655c0cfb7a79dd2c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166141 Malicious code in suharta-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b80b5e1012b1a9143d693f154c5062e5839f8ed101b72b6fb53f4713f6ae6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166195 Malicious code in suharta-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdecb76edb655ba4b95999d31740ec743239dbfca443856905f6b081988b08b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165921 Malicious code in shilang-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea93a4c129b75d3e4790c36fe96402da7679ded717771c37bd99faa48200b9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165171 Malicious code in riyanto-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7908611f8fe804342d7507f70b24d0e882273b5a32c3914423cddcd54d690d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...