MAL-2025-158293 Malicious code in lookingan-konami33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d8610de311325e028aa1541e0502cb5ac465193722c34bce3894ff51e8c2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165650 Malicious code in saku-aiu-unianusiakasapmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b45ac08e5ec90e4bfad6c90aac4592df67270d7cabc7e311683a221274fe5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155587 Malicious code in hafiz-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03952b5403c99b794fe4a9c92ccce3cbfc09812ef05a233bda94c3b3142d9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164070 Malicious code in parwo-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9007a12da2d0ab2f5a604c6eede1ddc125a954c03c51a895e10ce2f3b8832f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165937 Malicious code in siregar-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be1e82993c9c6c7ec3ad0c2b9f450f90ff3211174eeb95e4542f3147e274595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168405 Malicious code in tealove-nameka23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcd0ccec895ac6516ee2464aa927c4e56f8df1d0563f1498fbfe726280be7f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166495 Malicious code in syahlan-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2792b1cb5efec99b269ba259fb8876b511831f75ce6d24e8c7d700d7fc9a137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169046 Malicious code in tehah-nuya-bauyaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34347068825a9031d4575332a58d19a0da1c95755e3d85b2393b8ecbc62abf0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotauma-anafugaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f24198910a16449670d9dcae01b3e6220be69b56481bc12fab87dee235dfcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asawuig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611d3b11ce857d4043bdd389fb7654b95dd52ec1d50a33a7927b7c17898815e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd100854bdabd34b1c80ed9ad88d17a31c3f64342551ff7fe49257ed6d97805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28c14e60d33bf5c6290e506df829b042365a9e97d809f8d78028f997d04cfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba02f5d95ddde8958ae8a5e66601644272a9ca4bcc9ec3b6004341b7f4835170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2384c593c6bf6d7b1b76ae859ceb9aae6571699aa1dcf05c7c09c99eb7364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asi-mantdap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f52aeab32f69c43309e0154741c2995ff79c128c3b4475340265dcb9cba17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e9d2425937fb74c382f1be834a8cf00657a063ca11dc1ae0372d93ca02c624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157027 Malicious code in jele-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7e93ac6bea9cad22247c50a0e035c7f06e19eb0d85067c627b4d0be4c0ccc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164120 Malicious code in pilka-kali-nuivi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc80ed31fad814a15b1a5183732b55fec0dd8d60b91894797252267fba826036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154494 Malicious code in diago-kulp-kabok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cdfac20683b4cff160c3863ad894ead33574fbc37b35cabb6cfd4df8b4d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-af-gaaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8111284d85a82dc7a8ea662c6ff46e047270ca7bf198e8b8c121ebed564301a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...