MAL-2025-167592 Malicious code in teagood-nalikoli38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c3e937ee83e3b0c3510c3cc461ec36f64457417c1310370f5030d2dfe651fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163723 Malicious code in nudela-af-gfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b7f2b96c029853e43a7203d86e9fdbb146c93ecf9441457cf9bbb3612093ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165864 Malicious code in shilang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b36ed009609d2d36b1fea761fbee071769c53aa85b361336323b779c5237ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164779 Malicious code in rinto-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cf61624be4d346a201b0ea00c34142112d0d8cb28e60b8ba44329b100fc262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151959 Malicious code in aibopuna-mobile-aranbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfced3351112f59f2de65399abc9e6546ae882e6b62536a2d6909aed56a89917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160323 Malicious code in messi-itue-dsfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bf11a0c81f8faf66899807d897a91af44459560bdbcba4632222bdc4d788fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164286 Malicious code in pitra-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185dea4dd6eb87f56a0a1c788a2823fe65fbbd18cad4375e769099b2d2512746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163482 Malicious code in nokire-sekiya88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35726cea28a84fc9042dce3d0ca4cc283801ed3e1220619c82b71ff82c4b2d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea4d9786efec27cd7e202580477c80cd37034d65eea14e5689a7e8b421d0231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabsi-abibla-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ca495cfdb50a0857e3545cccc74d0f628f341adfb4785bac6ffa95b2d0c210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nmafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8acd7280a499bfdeaab658d456d94962bc84d5bbc35d0b78ba27fab1ba1a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be543d4d943ab6bdb9c26e1c95884713b9338f280f05f03b62b6e615b05c507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/arasho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e01790a76ee30c6bf898a3b0d456f25adc9f5f846bf03252fee10ef942844ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d117dd930750895c2b908d9e422916905aac52d26a7be4fa90dd873542f8da8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-nuivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b697bd3293dcf4b5be56694d68bd714487c35a22b0345195819951a970f9eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2f7a059cdb361ee7ed3e8b5dc4f125b7bfb676a199bcd0b0af198753ae4899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sujua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3f45044d33499256c0c491724be0f469d0edd15680f69bdc52e801e2176414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftaiky-writer-force (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa28aa186b2a8fc05fe7436fc7ba6126636a3aea0056397c69678f6844334590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gzsaxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c5cfedc0285cf179e8541723bbb3d590e910c118207a9de5e49fa2367642a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1149a74def76737529f5ce87d9d431a6f21b88c7ee6fd969aa4033195b647143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...