MAL-2025-158967 Malicious code in madan-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfced514e6ac9dc6c5b461180b3b84b99a0fd8d2060add58cf321ea7f6916a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167016 Malicious code in teagood-lokina50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d734c22134e3761e320e53552e663b84634f1cbfb430e2dd70ea1a458f8d550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160988 Malicious code in murai-burt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b0aaabfa75a2e7f68ba5e04d1484a7f7c6dee0a95563ebd64162a386fedd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153407 Malicious code in avminh-afgais-fodaahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95274f67b80ece046b0d80f90815975522ad68d70c45763bb634cbbf06d9485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157099 Malicious code in jimmy-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a57405a0ce80bee4600126c8747f052d66882002bb393ae09d2c4a2db94f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157992 Malicious code in layla-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb89d187f152ad0d9a459760dcdbed24b0c0182e86b7e5065d69a7abdc89b7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158029 Malicious code in layla-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b77aa4a33628584835a3bcc81d1363ba058f86f7f5e22fde0c6e3754fdffee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167311 Malicious code in teagood-nakamala46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b2e6d4b1f0b6116775216cf5136a8a17361a609043ae972bb68eb62156931f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc5f8e38326a64aaa2e127cdbffba541e5d636959a03b1196017c83752b90e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151509 Malicious code in abiuna-mobile-amaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c10c0b3d6d4a91ad49d944df149147c12166c98c37c1c2f93f88373f9ef114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166785 Malicious code in teagood-cuekin21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2fbbb570ada3c7e3295dfec9982c34f98fed4d956497361961b425022821d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165740 Malicious code in samehadaku-tsses-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b91c5177670e714a7ca9567c0864f8601d447a305c2dd3e355a3a4471ff579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159013 Malicious code in mahnud-futaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8073f2f0afec84e2812807efbc30c8692d232d9358fa732441e9ffff3a48a443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d48666a7c33cc10c87fc1bf9b3e9850ebedd57830a1b0f3230417ba7df7e95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426a11dacad6a95c5217663de94e61dad9f65fe60ee8878dd1e4c9033217a87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e774fc47544d1a2c833eb62ed7c6b4f42ca902f070054f73df4d79853d639f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151544 Malicious code in abu-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3536025414b7c383c0eee603ebc226be2ee50a73d7fc5b381a1839ff247a8af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151701 Malicious code in aciaiaggu-idat-gfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a85fa1a2ca01f9d125e041d2c5d9b083a7f5b90625ee8aadd10b0e4309beee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-backend-hermes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05940c7f294c6b60ca9948a699c21c99f5ece74f5993de0fd374cd1fabcc5464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-dorado-webdriverio-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2904272d156f0b2957cd0ed514326c046b100b1bba6c0fd4d6d6748ba4a431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...