MAL-2025-155978 Malicious code in ican-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff81641f8d84f6a3dfc626cc44f75aef98f61b3f3dfbc084a89620077d2e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165318 Malicious code in sabua-muhadfufi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 740a8f0c9162c399c0c3fb95d5b2f25e4fa0b3cb4a83dc33a0074dee5bc30537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167232 Malicious code in teagood-nakama65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c0011be7f6c540047107256873e4c223e7163761cdcd7ae00ea368fcde356b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159367 Malicious code in manadsi-safadi-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3953f933fcd7e4a2a2f58af585d34108e848af22de0abeefee1d42e1ec47a28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168486 Malicious code in tealove-nice1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0925ff1aaeda858503bdebcd107ac5b265f9610a69628ea2f3c4d0885ae8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157789 Malicious code in kuinsu-lukoki-natbaabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86132a2adb0e5f05049b558ad451409135b1af1dd5435b4d452f57cb8b87f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166007 Malicious code in slamet-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8b9d3274bb451b310c29a81520ed24a54967bac95ae2ee229614ee41fadb0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164715 Malicious code in rino-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d269b7aadfdd7f7875e58a3ea6583acd8232e1a4b5209c9ec3c086ad133f7976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alonbio-tolami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a4d2311c5c34d325925ccf4b7dff9fd29e123317ba7b46827bee819be29233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-iginno-jaimmagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3d5a040536b31547012d6fc77f82c74b00f1c84ffded5a46fb6c45778e75b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128c87f3840ee6806cb761eea0c19fd05192feed3ea621bfd43021b690e7ee7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviabpla-madoliosao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666dae2a5a1c1ef0ceb60169e4ab8974800c5dc4bd6aeef0aab058fd361b187c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wbo1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292b2f368c52ff242900419076ac2f7225762e522eebefbdd8ac537efaed1a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129a757495b3adabea030ecd31836701b0013017b893c18976bed71282dd9d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-gg0gnmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2045a96b71c02ed5c43c058166f7bed53863b796452d666085c2896c4bedabda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyau-tuyaat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c103aaaa93b15cf8e8687d7c267438237ca01244be685ef1d2e3ef0ef72acaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavil-maasdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c583276cf43a0f592d9e0e5c26cbb3e6e9ab9c3e3a7617ae110d5c4ecb4c768d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afaa60aba7109177bf537aa16181f9d49f0fef449318e7b70e2b9d55cb638c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1758306479967ef5565256b6a44bb5828f1b71a75e1f34ce5a718ebc318a982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogof-dasgsgsusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec79ad796bd0ec41fea10d590d7b72853cae5869a6f8d47dac63e112cc38aaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...