MAL-2025-155925 Malicious code in ican-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e3016bc6c2a26acf6c94ff385cc0549911e3c2267a95fcf6fc78afee8a9995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154484 Malicious code in diago-kulipo-luookafamaahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3001f7ef7e40e1da4d571474e522f50e07d65dc2cee3a7eeecd83995883d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ac0d6f4adcaffccb10590d4c50f9f47921c9621c9d926f8e51950b1452a683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugmi-amanamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3487261a2a6d39d90a7bb981974b976d41c791f93b16ba38148ff51a50d98a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-maasat-buyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e4233eede2e276524234cbe91a58dd5e38173924f574fdef39d9b80c7b9900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ce152a9765e9aa9c42357658ec3607b5b134862bdf66b0c0e65056fe16a5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idatqt-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a34fa15162c58e48bec781281b2c78e9426b2238b097de6fbf0019d8b1fd53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eabb453b72ffa96d3b7dde58862cd957d279424149c57dcda5fef31d7bb7d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158718 Malicious code in lookingan-namala10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d0b16213f371dc04435b420517124c25d8d2282a6b11d60125e9d2dadec61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170511 Malicious code in verify-tical-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca895f05744e37f58dbbe28ffa360ec15109891cf3db74a6f89eb4c3c96e6069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163010 Malicious code in nokire-nakala56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ef502ad2970704ae08c569c3acc9743c390a8c7c579ad88f6cf9e03af95448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157347 Malicious code in kamasada-nutai-kadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e43042a54239d584ead8ddbebd97cb833ab78aa2579bbaeeaf858f72de9d567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/erioo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54a47f69eeeaa7082edba6ec8ace847922e4690d58a384a33e9176f096e1c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e53d5845f18cfb72156619ef2103f96ce8a94d1e075f3aaf97880cdf0b7261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164426 Malicious code in polymedr-mindatas-buipenajar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6787064b18250e77ba327b890bc5687b1730746df92257ad002d41bd497647db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-angabofi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c4b40749372f6e1a86e2fcf7d645e9d96d99e584e7d70333b40b68996aa1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167194 Malicious code in teagood-nakama3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fc02f066079e18b01a11c14cc983aedd1c9b54e64135ec91d63845279ebcc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150086 Malicious code in @mipta1/kadlad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502f620247b9e1f8f4ee0f6284a74d35707b168a2a21d8db2a57077ee018c768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166120 Malicious code in slamet-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f36c5cf9dda9b87706a5622d7200d62a827984b3eca5df457ca9cdc9e9851df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...