MAL-2025-168708 Malicious code in tealove-reborn32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dc1363699ca79bbee5d56ecaf120fe4bdc6a9099b9b2f033363873a77c6b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167831 Malicious code in teagood-sukuna74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4550938a0be94300724d81e8c3fa286b408a875e3a83459404a213b204ba1a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161790 Malicious code in namae-nadua-mavio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1517421a88c7888b1b9fe6d2ba25246ddf4dca0eb499a57d6043c115b7ca01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162350 Malicious code in nokire-arhani38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652916d59af648b1276c4cc919546c75086f97a1f423095457a2861de3fa3547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-ota-umit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a226b4b9b28f581588a1df07008d329cf5d37322f527c3a0f4845d10b00552e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruanainio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af6bdd37fc597ef623b8c85c692a43516b37800cd66219cfaee3cb62a97e9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157489 Malicious code in kentung-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eac191beb99ed70fa85fb5876c0bfd12a6e163e497b5a1350b34f79572b218e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162795 Malicious code in nokire-lokcek40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9abb863fdeaaf03ccb27d319aacebfd6d49e113bd9bb836c7e825ed8ef5d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f72b963061719c7a615472672dd7876e8a860b0c165c2bf357ade681eaa1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lni-pibalima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c667c5cdfa8f9c984cb69c65269edc85a379080e4c1ecfc33d986de384e2182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685bcce37edf19526d41758a89e13f081a2ee6eede3f886d6e88594a8f22cdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-s1aa2s-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d236ea11d4d39c2cf2ac757dee61f84355e4ddac0d044c53eb0c918bcf520c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816dd072e47d04137b0088c4e161ee041decd9104bb18c32092bc9f14432ca6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedad6e94ac091c96cb7f0daa2138b44031222681f318bdedcefbd861b63e939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ertacssau-tery-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623237c9008e038b2dc882a140cf92a3b2e587364ddeb07d68ee7a354deacbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-liya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0598005e76f034953ee0518df6c03b92750dd4cf4da59775fb16ffa6695f5218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167443 Malicious code in teagood-nalikami43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6b48748d2f248880fcfd14fdc8497e9cfd6c2687ae80f11bb7068b7817d8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160730 Malicious code in modirai-imgono-jinnanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada3ed6f44a84a41dbc2bb984fb7a4cdeacdd7f76b295d77870552ba22f2ab40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a238ab66e30ec4fda778ba27fcf98c19baae2cdfdcd52cdd5bb498a20e9a70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150198 Malicious code in @mipta1/sadpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86ea4e4d20306bf279edd03a7be1c963835ce77740700eb7c64f5fc7b6e2c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...