MAL-2025-164626 Malicious code in ramadan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849688622e953baaed819723f3f130fb58f7da7e4339102ad0353f3b3c993613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166612 Malicious code in syahmuda-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325573f181d2bb39cf89c0f0ac1126336ce126912b5d50b5c27d5ff111f57fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160812 Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150692 Malicious code in @miptaa02/ghdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a4268e1cd30d5b1fc057b7ba0ff7679534eba95f4f30cf62de6c943c08ea20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169545 Malicious code in uaragifa-mar-saft (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765f102b8accf2296b6d7aa8b49c97215e7c1111f7f8293aa1d134aac0dd269a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161688 Malicious code in nabuf-otomian-daju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a016a08d7a674076314810ba64fdcfe05a13bed8ff35f86dba9cb3c3edd7604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156325 Malicious code in inagi-vma-nubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2223d5a6c7e05b77c58a9d2280767eed4e57e78a11484d56b10e7cc48a42239e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166915 Malicious code in teagood-lokika5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2396dfe3ac8a8725be8a75de9cf22ea89b7113804c37f2960e60ea17d1ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-rasaa-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ef8b2372671a953a0af13f0a45673d0ee85c5a37e63d7852f81e8426ecd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-pe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f3b726b67ba1317507d4971e98bd39115f05afda3f5ad419b81f1cb56d218a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ed047307f3ee8b69a64788cf62bf631be7f94f107e3d5ea04836ad8a82555b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7459b2c30df910917ba817cb582d246a74198eeea8a80dfdf0f847b5551ad601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10baa66a2c7b0723052f7f44b80a18c6b1fc1a26cd3e6ecb956ee123187c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2286fa3a25a61e5db84f24eba48d3aafcf7b09cf273549bf2505c7f6eccdb25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dusuaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e03fa8400fc7e19c25ce1584dd923da4ea1a24a38403039fb5b3cb13256e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnias-iofagigagig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e63d49600c3348d90dfc1544cd61eac4b62d970effcaf0f5b20e2a6b2efda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6aadc653fadb0e1a861b9d8ad425ec9b28e3137554bc3b4e05c78260135aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-miolipe-apuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3900aa3c9a322e9e70ab74b3fbc269604433f8b0e28da54c501b6420541230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dc56e7e0462f9b8d816f9fab45b6a5f4cdbc5883a99a0ea220059b78e3e0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c58e6b8d7b2258a5fe08e0ebf3fb941f2bfe67648d4b171acbf7d0e68400ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...