MAL-2025-156446 Malicious code in inal-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d335ababdeeec986ca8c90b0758686096d7d7a4ad42135da584d1e832a824953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156891 Malicious code in irashi-2aa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea4306e8c518625590928f49ee35475a775bde8850db9021a7ccf7f216113e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167982 Malicious code in teagood-yakuza25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f10067a88ba5f6b6e8c240256bae57422e3a6cc22eb44165904a1eed3c69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166609 Malicious code in syahmuda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8f56ce64da2d35a5e2342a0a05952b810474c67bcb689367e978db7e970815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af4e2ef9226455fb47a5950a8cfcfb9c6b9251daeb2fff9dfdbf476e4e1ab2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f703b80cdfef80defe71d7dbd6c798b1cdc626bfe26dd9ae5055cdf2b77d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyagiaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c37454657dc64bbce5d9cc79a9809effa313732234196ae0feab256a401db2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadasi-scidor-nassop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434f75ebf69ddedf0b31847c0fff01776d6365107861819c413874e60ff18b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-nugrgaima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d733b405fe7c32c2cb7a30de8741d3940ceb8be7db9efaef94174303a6b2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b00a80604a5fc0368158e85a1e468e050d896f70ebf65f0236d5cd70d0fd3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analsia-akifai-asulani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a28d6e50d6f65f369a1f2fda3d46bfce6f60a1704a2ad97502faa1636816ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yasd1sf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b7330112c88f83f27d92b57300b2e4b20c96f1bde1edc9c6738b741a7f9e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fb16c17110305edeeb4d8f4db8c516969d96092c2918a7b7d898801982f06b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-sufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14e2ba73fa44d8229fb8124b14585b3a5d0248e4b4d34f18da54ee8997c0668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mutaafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86f7daa2a4e2f6296eeae8cdb271e423fd446caa24e27ee10c79bb77d01344f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aggff-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82478badf11f0350db391566195b03dd41299b11f69ead7959f9e8eda3f8f77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7000f02c381edb9303b2119cf0fd4e134a2ca9edd8a95f4ecdbfea06987baaa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moloipe-asiaoamaianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a50b7eeff10fc508b0ad3535411f0802ecd83533f7227cfa1494bd16d41443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162b5c7d9a710cfefcf22390ae00c5aab72a8935bc536314daddcc136484f83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07657f9f3a781c4bf5fcd7c2758744d1808657c20faab1d3c24dce8fb6a6ff35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...