MAL-2025-155908 Malicious code in ican-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdba4ea815d93ef59ce238102563d0f061f496c706a1691dca59eb206c49c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156362 Malicious code in inagi-vumafe-nauu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0ffc18aab6a8720908634b773184b8377958efdc5cd3ef5316d6403a8fe815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155844 Malicious code in iba-otan-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead9f1319fd16c6c0b76d51a08ac52ea383a841f7237c6b513dbd6e0cd40fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151156 Malicious code in aben-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac7324cb238a16750e67b21c2fec9b2fe6eed5a8c14460ba57de59ef814bf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157853 Malicious code in kuinsu-uyilu-vinakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2602301852f9a67b982a759505d7f9055825ff2bb25ce6d2928e60687126ba9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154648 Malicious code in digo-kamoi-aila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff26ddc7a417a5895c2bf805267fd99fe189d1b910ae756fb6132ee23361904f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170272 Malicious code in verify-aikn-ukasimisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e90fda4d3e2e9b1aedda5243a09ff0ffe8627c09c549f3e4389a7ac6ac497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153074 Malicious code in avminah-fagiaas-fimokafiganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fa34d42e3e6928fde6715d00726361f177cf801a71c762157b4807d8e5534e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154528 Malicious code in dian-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5644fb459c9c7415fe13ae0748519cf48c5be27242e631f2eb84b02aaab2b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150184 Malicious code in @mipta1/qwassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ad577539efa965c9097093769b6a3050f904259df80375a165f71c446c8d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324df10978ffdd442e1121440da65f3104276839a1332cf72834f1a93476f44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e73d01905e58f3c27470c958ba5402332591ae485bf4fd6ca80992cf432e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/witaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27f8865ce8b5753e086c4247df4436d40d248b0ff7417cbc893a29095622987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8817ef11563cdb8df156527e9c2fe2f05f3cd44ec86e37c1968d384472347172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cf90cb15c2f78a64e38ec56687e8078c99f08e43eb701346937c588c9b94c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b348d730122e00dc6b39ebddd6f8e926d0912591d3c45d2623ddeea6fda003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/miwsads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd67e95ffe5d080ab223610802562bae6007190dd47116e1f68f59abd296f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-sfd-ss3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6149f398396ff14fe931b9336396e0298a7610cc79f09ec7ec893fb015ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed93a1ede3d71ff8d9bc8ffd2af7134ff3931c4b078e388deaed016dca038599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...