MAL-2025-167483 Malicious code in teagood-nalikami8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80b4b01e646844ee9c2ea4edc811509a6b9d101f3cfe54fc1ff92b0079f088f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164925 Malicious code in rita-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf00d75631c50a687d7bc1133453b69b4fe92f2b6a42dbb0ca211167ff9fb832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160246 Malicious code in mattu-nagayaya-nuaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ddd8660e2652b33676c695ab577c33876757c30196681978c4f3e27c54bec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162883 Malicious code in nokire-loklok30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6e10086154945d4dd324d1f0886ae780df842b263f8e9ea5d0755cc6444e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158706 Malicious code in lookingan-namakita9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a368b8ea25e91bd9af1065b4041923d5a901607cf79967033101e4693ae058f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164211 Malicious code in pilka-luniu-kanulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3596b9bac6ccf23a1fac91acaf277861ee20873b50a1f3d089293eed0de2e436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165461 Malicious code in sabua-muyaig-bfugabaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a08ef2ade5dcc203cca0d8e532c64003ed8f54f5e16bbdb3b89724f78f4fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168605 Malicious code in tealove-okta28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eb2cfa9b12d9ca995a7b48a188aa8c5acba9483dd8fbab6ac97c4fbe622984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155617 Malicious code in hafiz-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b830634b2df594c1f81b18f028ceb789c93fa818ace3c827dac122c1c0364ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168137 Malicious code in tealove-boy30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89aceea6692cf38ee0aab283f3722d5ac0c5553d8e0918b7b92f4705b4f9f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150670 Malicious code in @miptaa02/fsgkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea0c986c79ea6e0db1c81648a887318dd4eb9d50d684a7b86986dea869cd474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragagis-ogunafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ece96345794cfad52ab5c8005441f75d5eccf630616342ddb3ee3d9875c843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dbb846799b5179c558dfbcc9188aefcfc4181fd55d7780caf8903601d53d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-likali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed57541ca88b41ea51e2db9507632070ece7fb489748cb40fd1f2dad63ba3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151291 Malicious code in abiba-avin-aumaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6800820c55ac54432d4abbf65e5b2bf5d5597d0bec3ad553666998c41b2fc654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160024 Malicious code in manuk-nani-ignu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e8fe7b7382716b1bf0b9621ae66b8e13af0e095751ba51abf595205f14404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161032 Malicious code in musik-dai-buys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2015da52b74720e089a6d542d312d5a550a556464f4b5135a646e858ce4c5a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150964 Malicious code in @miptaa02/tdaaqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa305514514eafc4277ef3f90cfb04ea95f4e4242a3ca7b793a9409ea84cdbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mar-safufrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e3939ff6d64a8fb566a0d366138ae78564b9d20e85374247afc032ef21b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c0011be7f6c540047107256873e4c223e7163761cdcd7ae00ea368fcde356b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...