MAL-2025-161881 Malicious code in nasrul-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce7a81eff1f09cb018af6602b90ae97c1754b9746273f682985102575d51e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150305 Malicious code in @mipta1/xfsizzx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b8c695f6a037a9df1686a1b4a34f9ed5fef674ac8e8b98b5de400e4ad5a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168566 Malicious code in tealove-nokire38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae85ff20ebc7fd282ddaf0be9f36dfd99459742cfa4eb427337e9539f0d4e9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169672 Malicious code in ucok-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b239a07533e4ea401fa1b6021b8aebf441fc45901be06c529bb14b89483ec6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168372 Malicious code in tealove-naiman33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2013c629c3af4315c66143c07b1f034fc462e51c61d3ac433f7a8a7299b0d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154045 Malicious code in cinta-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bc3a5bbf2ab20782d8cbf8abc2d5a26a58452ca4e9ecba530fdec2314c9f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155247 Malicious code in fitrok-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ef80b3f56a7a8d7db82dc5261d4a1dff42dbc7e624e213b547728190ca1cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158437 Malicious code in lookingan-nalako29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44a82e43acbb8d151c42f7d8c5db0cd3b9536f6df68ef81d36b982bf476981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158924 Malicious code in ma-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4659ce9379f7c7fc415db03c8a877ecdd5b89f4dfdc289b87367bfc6c78cb1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167285 Malicious code in teagood-nakamala22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc1ffa54fd8cc2734afc3083459c892eb10fd089af6b1337057c6bf902f504a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157398 Malicious code in kapa-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1ed4dae1b7bbda8d8965b2a223d88d2edfa7d0c13ec68e829ce26e47a7e512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153929 Malicious code in bufpani-mau-naayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd7883394dd2fa5065403b80d724d948fed149496764fe6a83b349918ad8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155381 Malicious code in guras-asia-thailan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b126f2af2c0c7ec1f9c394c5e976a12f18445243ef01ccb9f20fca243589831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165244 Malicious code in ruji-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfba4b832bf953d69a29b837763b5cdca3497c4b4bdff641473e4d76d2795aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-release-it-celeste-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d313480dbdd2fa4b3e74b79097939cc709006077b268b6f7739ebbbb5a559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-leda-phoebe-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ef36785234c21c00b9b872a09dc23df76ee5a10435c11ac71e04b7c37b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...