MAL-2025-164508 Malicious code in prayoga-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b83de3959c49377ec0b8c39cc79d6591e8d0bb79936fc5b80921fabe386238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08a3c3c6d17cdd102a9ea2a0cc3b5cdb493d35dd721a7e496de38a306a3f522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165083 Malicious code in rival-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8239d8a053931d5e47b1676293af6e2485b3a91e716d587c0045af9909810d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157228 Malicious code in jurss-zsa-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f159ab5bded9a2970ede5336f9b2b4e2054c4f5806fcf2ffae8fc1c1d9faefc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168621 Malicious code in tealove-okta42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c71d34ea6ebfb738ea71772acda8f3cd7ee2ba1cfa195abe92974b73b6ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd83394be1396cc5f112d3b9ec96e99c5a17eeef17cb0df17c4c37f260c29467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21685661dd07b64b7bfb6cef431ba1e7b5c3728b5a43be7029a24adfbc22e18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fe020991486f19d5431766167fa970152a101e4215bb0aa5c07ecca8f1676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-macnusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af28eabd1a6c103d14119f8a4692c4a1ac43d8aba1285a92df2b4e02c15dc1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f035d7fd539d2aeef5f9d3420b5ea3f0cfeb5bf7ba01981bd2a1321f86a9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e121d55322236c9ba1379ac1696ad69e1e17409ff4f2dffb72125fda72f9f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkbhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef1edbf3d48803a50c9d7ec887ef0cb5a368461ff0d2363d3ac7ab74fc278e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-abila-aiva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99dbc19a7f92f0d13d6f035e4dc9088585cf2f3d4e6dcd229360cccd17e83c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbba6c886bc9f3b8ffc0da8475c836a102405cbe25ff896fa8941f1a1b54f21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6424d263f46ab61081f1d05ae33ea2d0012707e43e78d5bff11c1072690c29d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2097d598477f6673fca421f9544fe733494c445a93e3cf5cc1f3cbe0814f85da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b6f3646f839ee440e91346aa3532d34c8881c7f44c8ecb23b07572267b08c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiule-amaniua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6987055f9a916bdc76f0f44521e35f518fa3a17b2c05a08bd75ca7622b678019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaia-anifama-gugag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db66ce58bf09ae7e43ce8f03f609cfec783b01e3b80b36eee73ab89b82095c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0528bd1218351ec70177a942cb737ed854507680d924a86693555257b04fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...