MAL-2025-155885 Malicious code in ican-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff0d744a6f0c8b44ba0e565012e46b642073b3f6b1af60f84f19665803f9eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166039 Malicious code in slamet-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c472a364f8708d96f79fbd942c5cffa3b16d438c83d20f0af3f6cd1bdcf7d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152356 Malicious code in alita-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d23e87cfccc188d933fe25aebbfa9c1a18f4e7a9fcb0ef2ee2a5b881eabddfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159519 Malicious code in manaf-assssin-muaanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a001bb612f9338e505377a33b9f3bd5c6d1479d44c04b4381bbcfb95f18a2e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160998 Malicious code in mursai-nudty-ssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27f288af5a14626a84876f61d0a1f9e2c03d78c1918e11fc2756acad11add7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154188 Malicious code in dajouka-slas-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf12e201d68c30872e143f1bc118d39fae77f4184300466777a2680fe89a14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168046 Malicious code in teagood-yakuza84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e9d2425937fb74c382f1be834a8cf00657a063ca11dc1ae0372d93ca02c624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162780 Malicious code in nokire-lokcek27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c588ddfa3dfb2120daec0188c11ba2c83d26b2f2f0fe31d38a73572f22e9ea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150720 Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-ikalabliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea3dbf92eec2b2abd82df60c92a313c542214c6f17cc437885a1f06ec0da05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98b4415217b98b388d7507ede28e87bcc040332b4e018ab67a8ed1934a459c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fa45f766783da72d01780566f4e7fa0941e9ff6bd5ebee617b4bd306f3dc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoi-kinatmumolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d6dae45ff6a86e6a2414886cf33b62fb2aee333fc03dd78ad919a0dcffd476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45efbf7f325c41d25794872b80035626ddb7d5e3a41363b143297b30204f57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa98c0fc819722aac5c0725d77bfcc83521ffccc42fbeccd54a9c2a68049f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dec0a0169bc1d93ce4f852c39e899106f8aa02142cea27eb852e7e2ab1a482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakgfrae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee3009f5fd0dc2deb35857d5e09615252087efc056071e06bb08cb138ebf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf5cd6c1865073d828a89ff45c10d8adc0689fbf62000c3cf8bb684f68643fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulanuli-nalaui-lubis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d5632ed26a86f147297f925f173234824bc2f149e7d70671e70e5004dbf359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aisx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbe989d4a3c83e6e120123cbb4a8dec1bf62fa06fce9fc4764788e23e484735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...