MAL-2025-152920 Malicious code in astia-al1f-daronoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c214d8e14fd89e62247b8ce6b14c19be06da58d73700d9a72b43c74b8df73cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157648 Malicious code in keyla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c827ebfff9b2763377670a3ded0f1745e11a61da55a4cab827bb1830dbafe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167756 Malicious code in teagood-namakai96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a1508320493850e0cc6ff4d8082be9ad024a51f33a4cb065806de85a4c855b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153086 Malicious code in avminah-fagias-fiafka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8303e5f7e244500eb4ba8f812a69af93210829a1ab3cfa62364f4c4618727696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulai-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342dcacce0a1fd7afca33639b6a843dad25632874220b6f018f39f862e9c61de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151331 Malicious code in abih-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b413d07012ad3fa067dd7c6a023b0c4ac338d5249abb1b01ef68efb91f5ad54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167200 Malicious code in teagood-nakama36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535fd6e3b174ad6f7af12f91b594708d63431d05425aac2599b2937e64db82f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161626 Malicious code in nabuf-otoin-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1839a6cf0fafef2284249c012f3cb9b5c2554d2df916fe1a3415ea62fe2718b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a851fea9355c3e45d128770f62b343a8ce0f2d9a0915ab4e2a039abc1d0962c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-assin-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b1b53bae90b0c3f5668f7c07ff1ec427ffb447dce56b9b44dc2c6a9c9dab59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-terd-tun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdbd28c086638b2a48a5220dbcc9aa8eb4e4aa77dd84d7af9feb53615f15bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a447c8ad82e2703ef42e594e9f61875cbbf21550493f5160caa990f8708ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1398713559e3503e69c2632f51ac6056bb52b5d87526bf32d0e90bc9fe9c6316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dokloi-ikai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14158368dd280291695955484ba758eb03010e9659f501beefb0ae1203467929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3fd76cd89f7d9a8d8f976d54df48e9eda182e9982f07d00afd563d077aee60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-ujai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3571682adc11a6fa1a8304bfac44fa876901bf2c459e82485f8bfc4c9a8930f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f855122f592ee4203c6930dcf3582587abd13cbf2ed432b3199de7e6f93427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc4ae2b2ae3e4e88904a15e628590af7b9eab60260554c5af70b09c443f52da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ssd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9e4d5e8de4eb620ddadd2d10658d943f9d00b335a6ee22e17e92b8cd9179b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de512502e7231f7a1fdd3ce34abafa723659ce6f898ca7a28c9fa59acbf801a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...