MAL-2025-166671 Malicious code in tadasdhi-nilai-tesru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7dc282a605f23bc7af8869fdc473a8c8248c0418a58aeff2f466daf38c67ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167250 Malicious code in teagood-nakama81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106b59ed9386319739b76fcaa2c70b44e83fd357b90725849b117e99457edd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154308 Malicious code in dia-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492d6b0ab515253967c6982f8774695af28740e0836a6f18bba601e378600d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156667 Malicious code in inufgi-gotauma-anafuz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3a169d553c969022e35e706d737be148f1b4ac42dace0056bb4713e4511e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150896 Malicious code in @miptaa02/ramyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592b8dd7a082827fa6e72eb1de6472952a8359d63f3e281b069301f4caac3b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163913 Malicious code in nustr-madssadn-syfahdmuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e707a8889f8700513c3d68d685e17b431c36b38967f118a1a835d5026807c8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167600 Malicious code in teagood-nalikoli45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40065ba8b8e76fb01ea97566f5dbde7a9bccb52c7054d9f013f2bdb3f70f8b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150840 Malicious code in @miptaa02/misra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214a37ad3ed6000d671e26aef2cf69e01d7dc3f90fe27edc5e7ed1d3e4655524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169443 Malicious code in uafagarug-midefafoi-ftusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b44085eb24f71ea8fe20bf6df707485cebf2feaeb07452b1035320ed54f4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotaihmi-klu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b219643f1e884967860a71b76e84fb075c4172044242691b6ad0aa4be137196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f823ae1a63f72c7867d85c5fe9277bfd8fcae63e25b258c96e1752ceed468c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb82c6ce2b8f6d819f99acbf33db84a83508821cdc57a5c23351a935821b75c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-dggs-dfflgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7733c8803ee79b470452c16788bd0489ad16094f6fdeeddd675dad231f4c0161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e9f89d0821dccdd133b7351c93b925b362767d666ec6214a35cc5397746eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9845a00924c4027bc750ecbc67c9da561465b300beae609d952397323e5abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4c7709b3fd03a34f43a249393bbef243abaae6601f009a952d34110e93fece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23939f2ae8f34a986fec5c34c82ed0e47ea20a53a149b0197e8def67d1644257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tadfaa-ta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136e22c53e142bebfc478a8b9c41e1e6e62b9630eb02de9d035e5c8f4c168c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-dauvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89514a6fc3f526d6af3b1ae675bc61e960bb3ae026426c8b15d6e4bdb708a7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701d01b3de94c6c7fef2f94754583dcbfbf002135ba1a2e4f0d52114bce32c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...