MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158912 Malicious code in lookingan-namalaka95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7528d3c70e5f507ab8c262ff1eac5d541dc761dc094c09c6c4f7440861358ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163800 Malicious code in nudela-ofgaf-gafoahagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15e3185feddb56562d0725ce1a46488061f1c8be9641e5c4d95c9a08bde4b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163109 Malicious code in nokire-namiresan55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cdcd7f4334f11013bc9237e5f117cee728bb92a61681aece837dd1fdc3a93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162058 Malicious code in nitaaus-1sfse2-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c9c18750b35f26abb489e636174bbabf228bfe96d058eabae63297d59fd6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-agogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 113198e1113933c28b29a99c0b25a132bf77625f389c20e8cf6f956c3849294a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-anupai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b638dca0248971caca3d40343d9a9ab0befd15e762e1b57ac75809cc51d38977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b022219eb50f4a8f91fe79fb186dfeb41fb4cb053ddc231e636a60a2b25fbbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58cbb06c7d4197190525a9a0b1697cbd7898f1d27f07fdbbc621b7edc53efe03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuyasfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f023faf4925d225e4706e23fc53e49be9fe3c6c1ee23e9acf8a999009da587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9e3a436da7c0e5801166d2ea02f9a0c7b71b0e56b2db4fc1e6a0657ab99468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0754007869171530b3dc268e4cc1c8b19c194ec455cdc480b4d7bc91698ad77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fdc447c4638176be1574bf3913f117d7fad4c6470f57100d6fe84b9face036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-zas-dss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdde568a2c1082292886d937d63150147189b272fc11204b7cbe45222182f9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/aim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f68a899d440e1a147ebf9b80f79359f78aa6ebb32dbfb9370ac6ce592cbff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/asdd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0768755b12114795a5f7bb2f8b4d05be5d093c9b38dba48a9e7752efbf3ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca80f9168330ab863a4f1534479ca6625a48e05a7e14fdfe981e3345c65f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bcb46030fe90bd64c6e6d0651ebb565c65ce5e3d3ea1d8870c1d2b1781c18d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8048932b34d1b883e7a44303faadceb75259c6bb8955af8962f3a0010e9f665b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959d182cfc29fe9b023383637fc388b02042bd39b660c596e79dea1fd155010b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...