Malicious code in koko-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db7e98b9bfe05120e242f05a6f2504c00f2707eb6de9cfd60434aa8f37e9940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f5d68df0721388f8e3054de3b51e805440682ce543447d6cd858f0b4f0ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155458 Malicious code in guras-nutra-nuysipas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03646916c675563dd28837741ce9b4b2ac25b4d13682fef3477d94e5c69456c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4276b482b6c1d1bd6b28167388812ef047c9299d74d57e3ef70d396a82828101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156498 Malicious code in infi-gafobai-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1253ba3abd75e28bd2ab8f9df0cb1a59c1139100d3f37e5214b8d3e2993359d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-comet-prompts-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504ff9d0a1876739fc8a79596b830b0a92c29b4ac7fa97d300fa5358b1419756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1488c5a5b92de4509b315da4304fa8c0296e1bc814d0b1e9fdc20bd72693238b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969d71aca390e2a8f14d219d3c9a9218fa3b0a49949a103276dd18c2a0934352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104791 Malicious code in kiki-kue91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5fef6e0dbcd70f07a47458cceacef671e393233fa19f52a82a4712b4964381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4641cc051b8d5e046ddf1b12f1fc1163858d65abe50cdbb67fffe64545774e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-saguer35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e7ac5d31b0cf29a23108becb511aee801604185e7b3dee44d91ea493a3c150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kepok15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a51e0cefde407ff74545fbe9b6b686291ce45caba1afca17752d416efedd9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74776 Malicious code in okta-buburayam43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa98979c996b8e6a5715bbfbd5e2eae43d60c9ee6d4c4fc7a40a4469a6c9780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-serimuka100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0632893f3fef3130ba23309cfea406d1ac3b328a506268ce3cdf6e94a09b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-sate29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115ef4ee048f00bd7a337a59a24a51c18dd5e0fbb1bbdd5353b5cbca2078dd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57406 Malicious code in lisa-mendut32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84998932ab03f441ba4513a94542036da8e397b5346b6bcbcaf14f626d7a9266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...