MAL-2025-166018 Malicious code in slamet-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cdad22f52847570582d24898f3692d64cbde2d5a04937fa4ef7a8d65018ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152531 Malicious code in alvito-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d59f782ab14989aaee70585f256d0af25147af6bcf126ffce592179a5eccf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153630 Malicious code in azhar-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3100e1296412269d54d562d8ff99842f1b33056004d4b6c1131d69845e07c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e837e48a674c4c5f89b8e23d34a50944d48444037d0506d79e917912786449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169037 Malicious code in tehah-nutawadr-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d785f05bfab38c79b240e88a0dd09626c623281bfa91df55392ee76ccdd7396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157631 Malicious code in keyla-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a92aeefcb5820e7dba65207fb7f383ea48d5ffb3d27da9be7003ca19d6331d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159705 Malicious code in mans-matdu-hufmaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b0fad478514acc342696d060e6f0edc72206bd555017dd260e6d7c4ec9681a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159072 Malicious code in mahnud-mau-namasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89fc41f84d18c51ee0cdffc9b9d9a935908168198935ea7aa03f1b84d44c92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158136 Malicious code in lina-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7e59bc6c788e4e93f4e832c177ac4cdb1641c27531771d430b2d1888181c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-sedssad-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c22d94b17a49d0d60d785b3fb6366197ac87488941b03f2de9c8f13752cf5bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alo-mafadi12pafeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa478956b8fb2d634f3ad7714aa904a9fb56ad315c7a8b18cb45adc14debd416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-treua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969e5bd440734c14899b862bee49d851fac31af4074570cbd5740ab5e2004689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-baam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be800a026149df2f288be3e2fff8cbf7aa6c4c7b58a24da1889f5eda808825e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e185bcb2b42832ff146c44745731f7c0d830e2e444d5a32113cc5f2438e5bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-afif-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd02ae622dd3c7c1c110ffa7683444a08ee759876579f127162dc2c572f4472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae55d9069c2165801b3df1ed692360a77414eba3ca13ccf69b7b7f2adeba6e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-mmiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38bf2723ea28c939496f4dee14aef7c7067331af00ba789ad15a7c890b314cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65507dde608e7d3a41cf39581570ed9e5b79a1159f5c024089b26b81dc55ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a83618eb5b9bd4388f93cfdd61cb370f752b7cecc269858c06298c9156d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59ce15bb2a3372019c2f6adb8de1494935c43d3d372c9fbb5b993bb8642dbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...