MAL-2025-158628 Malicious code in lookingan-namakita2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919df842faaa40a090e48681f1cc2dc3aa04fb2ea316b53c73cc2e6d7421ea81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160484 Malicious code in miracle-dibook-ikaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb90ba99390cb39a1c7747978e1c6db3a3542aa1950f2af4965cf7afa526ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169226 Malicious code in trevora-cir32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b34944010749db1b0935641f44c42ee98969ec5e32d16dc12649c536daa203a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156074 Malicious code in icha-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e654818457d76440e068ec3d6d2469c3f1d37d56f167ad591f648a8ac249972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151323 Malicious code in abih-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5feeb7e7edfdff1d637e69046a5ea7542adacbd8d9f0ea21cad0941d944623f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152077 Malicious code in aji-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e5aebb2ee6568d9226462b781362cc9c330515fae8ca1171ada8f453c3532d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7c9f126ec31148e6e560f3667ffe2463d52e0a1250109a5e90481e8a0364d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fa8d2568d9910a4069cb47e6796586513da25bb5bd84e6ab411256f5bd2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aea3a2de31dd035b1b361e1e81cf0e1fd37701820c9d85e94b444fd5431e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-intfsi-addutfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd550fd03f3d846285a49e206ae6311bf89a204800c3d2267154866fb02efbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotahmi-nakailu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fce4524e26b1a1f42e8fa17e66d520b7c084632f3cb9cacb381b58393525c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaiggfakaa5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedf65b0cc5d0ea11e044a61c832e2c0aba4d505b5325b361d43c6ae34174416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rdtrdatj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b00b593b98c1f89c781850242e2439711a7685d11704adae6c100502354b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupa-lubizfzlio-igugfsddsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfd68a7c5c9b1ae52b8a62b0a9f785e86173b97244ad682601399c52985b330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152313de9cc4922b737c1957c982f69d94647222dcaef51128b791e9572be12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e135371c89226bea915f834172350782aa9af5306935f1add3f82151db1a00ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ayl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4203873f22f6f88bcffb80b717889f253768f157cba300f936e8a0ed62716aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58769c330db00ebace58cfed3d8d4b02088403b9127f4b4368936056698f6c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7c2fe689d22727443013fdad01ed5a6a92c9559e75cb675fb52d7d9a5266a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8159356b0d5e7b91f4e9f5b1df50cc35d1077f7cc95d89e1e225ad5de78b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...