MAL-2025-156474 Malicious code in inal-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053717fb14400be6a9d3fb77f62633f71111098367af43abeccb9f4a270ee78e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157884 Malicious code in kupai-lukta-joalbik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84de7eec92c601c903b5dafd39eb33333d98e32d21ad6caf6541b47b3ef7567d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c8d7b13449d3235f07bc6a9502fc3fb950f6eea60316b8e3d062c0cac25842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169409 Malicious code in tusya-fass-s3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae745b4a08c6134186568192b568f9c79536557a55ea04fe3e0f4adedfe4920b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169386 Malicious code in tusaaya-s-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8d725e52f179be1d2ce3495775ed6f7408658f60ae582cb3229728948618f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e8a7f27752f87bce9a22fd1fd954b75e034c966ae8a9c2ccd48f100012f17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aku-idusanlun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945be6f2d535f81e43fdb21cb25955c35afba754683b9d2885751e53bbb129b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3650dc3b0443477c3911e6596152f09953b3035020f508e0787aaea5b3a4274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55727be591444bbdf1b8f6d1fcbd7a6d4d60375f029fde78acb85bca428abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152161 Malicious code in akabia-aligumafi-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a95de52e791fb1184559ed304225efe17e9a5cbe2a54763b448200d8a9dec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152680 Malicious code in angin-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f02ab7da63f5889f752cef7b7b74562df3711784538bd99b8b7dc2d9966949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946a7d9fc2c255713a469d5a96dc76d4b4d25170a9f14f518b66232c180a0cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02229458c17333f4a0de131d04e55467cba0bd528c184648ce9675d2f4a6e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164724 Malicious code in rino-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276248bb5afe305ce0caf5d5b58df3d374d1c3d6914ef9c317e89311e7db228f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159597 Malicious code in mand-nomai-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0646bcb5470b1dfb09adee935ce69626bb1b606efa3efc9b72a23491688be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162750 Malicious code in nokire-korean19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74b8e531135bf775ed641faf67cf7f84d01fa941c627021710b8ef4a7357f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157215 Malicious code in jurss-zas-daaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ac02e03212657974ee64834c627bbf2675d9d9dbc7f13f7f9d45577b32d17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150792 Malicious code in @miptaa02/kkbd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ff679004bf780cb290f83a35d128023e14f66c8bde405f67865d7436937536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158094 Malicious code in lina-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ccffa35cff5daea1f59412c8e4f7b11214074dda8a11ae5c651779092d9aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165810 Malicious code in sfga-trud-mutia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb6e9ad3c9993872a1e94a4543d98dfa1c6704583ca4a705ee4b3c5bf73879b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...