MAL-2025-152121 Malicious code in aji-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9349d6da31611245f76eb8631f36274e5b29b64cace0fe3ecb9abb5e40c8d41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164054 Malicious code in parwo-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf1fba8a89f7d4bce2e1b03dda3497a46659d433653bde9c1d97ee99fee0ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155834 Malicious code in iba-ota-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462a3f5228e0bb4d6206c93feeba19fd983c186d246167372a44794d45fb6623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163402 Malicious code in nokire-sekiya15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46ea3d7fb12cd232ad70ecc0e08e2f601d767696b87f8e29487b56e4e9cb88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150043 Malicious code in @mipta1/hdftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e6cf8e94375788219711b3acdde8aa859053a4ff314a36a17cc776ae9d4f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/koad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4ea1e5c258bb58ec8ba4741c9a2292d912fad98b7327953bdd433248f964a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/asisdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3132407be96d2948acbb83c5b52108f5b8cf6b52075c0f31acf2e8c183592e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milaoa-dudio-nsastuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc521ce502d8cd92683d3124e27792831156421118f88df1279a4af6b186688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6be57b1fe9eff229d23f0716fd00dca397bca4d38e39b4911663eca0b7ee810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e185bcb2b42832ff146c44745731f7c0d830e2e444d5a32113cc5f2438e5bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a83618eb5b9bd4388f93cfdd61cb370f752b7cecc269858c06298c9156d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae55d9069c2165801b3df1ed692360a77414eba3ca13ccf69b7b7f2adeba6e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-janaduraoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e3fd778e77a75c1a18c191a7cda0f770a250e8ebb9887cbf50f77cb87d8f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fisdnissh-sf-maegwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6e3bd084e017ceea4889a8a011b1852026176e45d61aa23e873c644b1938be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65507dde608e7d3a41cf39581570ed9e5b79a1159f5c024089b26b81dc55ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyaudtu-tauut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206225f292849743133a34d305b23bc87f87a77d7b7fc5e2c2a37875b9232251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149929 Malicious code in @mipta1/apasihas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16b890d767d336180cb9f6d5e182e2945a9838649f58cf763eaa0baff16905b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157918 Malicious code in kuroichi12-fghgj-dffgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa0535fe8cf693f871696669ead7a275d3051d8d868a2f358626840effa5238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167548 Malicious code in teagood-nalikoli138 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441ed56b19e71f2a9e0bd5eba93be9a663c511bee9023b545e97f7cc8c1132f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162636 Malicious code in nokire-kilua46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f8be9610325cdd3204e0bc7796059d1d92b6f791d6086e76d527c6e0fc4c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...