MAL-2025-164710 Malicious code in rino-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645e0f5199f16a8ec1ad94505e7a04a0651f79b01c928660648cf22e597f2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154438 Malicious code in diago-klp-kaloubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0bfa0bf995441b34b416149d22d233db6a2eaec7411984d50075affb526398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157925 Malicious code in kuroichi12-nails-attached (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08128121050e68bb69fac366b9770bd259fb0be9a2bcb291be48b2ddf7517136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165291 Malicious code in sabu-nali-lufbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ffbb05535c2e7561a2b051f7bdbf80a702257cc91724409dd0c0584505845d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fdd49fb1353f67ef4efffef230a679b6eea11ec13ee1f0d5a6e7508eeb1e71b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154755 Malicious code in doalgo-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e223f90e06ae5bbca0b3911e29552f0316da9dd0cc43279ff3df15b09ec8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuffak-angabofi-guna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51800f4e3b73ffa501a0eefe18f62eb28c68d6426dabdde3031090d9aa15ab35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b5e3b38406d966057c1811920c0198e9f0e4e3162f2e7bc64dc2824be6661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165054 Malicious code in rival-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f10fcb966718d85921e30d2a9667716e45fb364deb11fb0e280e44b5446e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162815 Malicious code in nokire-lokcek59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d251ea3bce2568f12619a074540765552c849bde456d3fc85e4ff6f1877f3ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155948 Malicious code in ican-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0171ced7c715dcde4fd9bd067bf84941c1db430826383de231669f62ecb7a539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dauuhafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e7a4a4154d44f5af7a422b1d3d03df8795bd0e1ff502aa5477bc5d31bf17e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154156 Malicious code in dajouka-dsas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebed85650ecdfc7071514f1f6c41f7e87866f8df28f2008ddf32ba51cb1e358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161251 Malicious code in nabila-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9625f0915502bf4dbc760cf3aa2ae775d7d48a7d10aa2470883d6e02512c260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-ma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5aa32dd69c795d6d982449f65460195e181762ae82ffae60ddc02521e0e2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7372e719c0f9b790c7e0ed1742a0c237f922819535bde2876f5425be475ad283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lkui-kagbdsdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eff575086c520145ddadb44f0fd3b1601736ab3f3030536877386c209feb27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417e38bc8db1173fdf52ac2f36454b30e32d9a4f2f496c7043cc854df0d1d0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150704 Malicious code in @miptaa02/gzaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106892914853e071fee0633abb1a36b24bd0d42e4b8aac9cdf1ef0ff1cf970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe228a7ff8ffd93e628a161236a236a6c8cb6824e794eae257b5cd9cd0f73eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...