MAL-2025-168593 Malicious code in tealove-okta17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921eafc1ce0c0ee928c88e71feb06bc2bd601245ff8c2be454366439ce1bb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162931 Malicious code in nokire-loklok74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da1ef532b9f28e33cbd3402e894cd16a84ed8e2f8f94a64ce468e712b583591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58ac5ffe675462943a74be98a4f7f24d486502dfa45ddd426111a900c73d87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159788 Malicious code in mansila-tfla-magaazifidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5500181547ca3445f6d7e6d517a6f74c244b07d2a23ab4413d24c73bb75971ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-doiafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350f7239dabc208664f3267bbc2ccbbb66fa9a7647e728252a0045603ea6b05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatafa-btra-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd7abbeaba75203e670731efb5a0ef24aeb2c555563cbe8f0491630c0eca915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuyilani-nikubamia-luyahuambi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e143e6e9b821e36eb27a7afb3de9c9a9a8cacaddb39f34dd9b75da4395f94644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6fbbeea3fc20bbdcf9944f3b20464d98bd8b79b4ebdb3f230a123e613129ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/hykg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9441bcd2970318dbfdb5465fb5ddb9b67a9d6ff6bfcd295e43d9c6d7a37fb53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf9d78239ee6365870fc66a21b1b5303de46ecbc3ed7570d5a1a519187c620e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289e467f0f679cfddb2d3a0cdcab6538c80aa325be584e90b9be5dbd400f5a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2a1d6c73ff3d003750f41be8d08d4301e03e84e917656978e744af69439bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac7324cb238a16750e67b21c2fec9b2fe6eed5a8c14460ba57de59ef814bf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2747c75eb82160d4a58aa0c1b010aaf8dd7d9ce3b4a594760c4a81d20dfa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929f53cb0023b24915109bda79e7be4b4d66db6aceedc566578fa15be830841b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb0ddc22d9c5967e9c04ab458dff532c587cbf3d8c1f38a44bf40540963cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ef8213ec0f1187cf3f0fe5fd826b46450a9b4155e7559f1ff04313ec320da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0a01f2ec450d1b8d7ba7ee5e46a1e2e3115640bba95e0e62aa8c99c3695bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158376 Malicious code in lookingan-nakomi19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288128309101100e8c5a88d3279a31419406092b6e7803288c936f330d810d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153833 Malicious code in bitha-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d73097ec80dc72e650492bc4448c8e027b41fe2c9ba8fb61a0dcce388e557b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...