MAL-2025-154364 Malicious code in diago-kamli-lula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d557b60d171132f551899b507242b6ff283ed299e6928c4f0d9791cb35e07eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159302 Malicious code in manadi-scaaisor-dr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d512021391bb808afd4364394fb745cbf6f6333b4f8bc64eeed591c3b0992b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168782 Malicious code in tealoveness53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dec3c7d9669e526ea03af7af67bf6a1a13b3d524e01a26f81bac9769fa67cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167774 Malicious code in teagood-sukuna21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e275fc86977305d723cc13ef33371738a0ae8c813feeedd0caab7e176f4b4505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169238 Malicious code in trevora-cir43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8e0119820105aed19aa036174fe9a43328068b04e5e52d63913e30a6079433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161649 Malicious code in nabuf-otomabin-nojaggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafc6e79a92f27e736aabbacc9f502f75fa80dbf0a3377cd6e4c2c1c55c9abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170216 Malicious code in uyaudtu-tauut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206225f292849743133a34d305b23bc87f87a77d7b7fc5e2c2a37875b9232251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163683 Malicious code in nudalea-fofiri-agomoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d11201d37b492231c8e4b5d480037386d0274395951ffff4e5e05951e71cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ecc530bd99e5d1b35d79eb10ea081341873afdbceb5178ea94dd6525384af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d89b8dda28f2f434df1ab156d82a4d39c8f8a6522f07b36a774acfe6189586b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bufuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2e027604d5f9ec4d7e8c66673fbaa0ae1646e4fd4bb6261e0f62849bdc5e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36798237e88cb9e18986de6280c3ee68ce1ccb8f2abe8ee0576ba86b3250e93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bufugabfit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480fa7e0e9b1a8b2b08f60b25f63762bb9e92aa86d3fd8654013f641f8fcfbe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kloip-kalokasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07acfcab25b743e5cd1cca4fc3e7715fd2d7931a5c7717c2bb4ebb94783e62c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabubauali-nanliui-iuyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd30c78dfbd59d2db73420cd106a173dd441703a855e947d04439317876d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c407757910bf8dd2c4bba6b704183f37a6567802505e0a0cd5d85f9021e525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilakabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47b1a15bd8617911ccdaf8c432e9028d6df164f7267ba437c4e2fca523d067f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-otai-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1853c44ac8e62f3face7d54f9988f60c55df04626284af232987e20d5a925ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-hentai-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c0c1c191ec0a6cc8a39711d8634a0587d0719cd252abe36868b6334a9fe7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ivdao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82071d17d3ecb09479f0985ca0072a0a487b4aef605fad491da1c55df06d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...