MAL-2025-167355 Malicious code in teagood-nakamala86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559cf8dc88ec71f34c4e193bafe9e02a05fceaaea8e37c3e132f5d6edf40b99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150836 Malicious code in @miptaa02/miqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbc12d1f0743f273d33d0bd9ee7701e4eea8e0fb1deea5dd7c64e194b98611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168062 Malicious code in tealove-aruma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674f6ae9388e857c3e7de41f71a34846fda3587020a991c893006c8b383653ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169644 Malicious code in ucok-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df0e0d00925c58306c64ca58ca14e1ab91fd5c15d8a415ee7bc790fd76b5506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a4cf65e61530a1fd30461bce6f508e8dc64711be074ccf811c3751477f74e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-amaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bf07d4add7903934483d4a865a7e4925b03388d4dece67d85d7a6cb75e2e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b36ed009609d2d36b1fea761fbee071769c53aa85b361336323b779c5237ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3bec11dbcf510b4446a85973bd4ef1f5c0fa8266bba25df447ad8dae0aa5071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nikontossaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756640d5597ae2b9ae32da4c24ae8f05b7fcae729b04007546420e43a2d260ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a80797b5c665ba2764ad2b3152245820dc7e28e737d7386cf2e2fd9ae9c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilakabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47b1a15bd8617911ccdaf8c432e9028d6df164f7267ba437c4e2fca523d067f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b23f16c0cb8826fa04b53488c2af5aaec7cab5a36af86c68be618f5722e70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umuaiali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd956b93e8c66c16347f610f5a764127cf12da369afda2ba0f897b868e4fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f64c71fb51eb821fe7fd9d831cf7dcda7b4a63af671b445fb2b9307dfeaf60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f201edf6bba7b83563092f22e919ac1979762de2e60d29432753813e7834bbd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-ssad-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea9fc0b78bb01f9cc3921813ecc1c721738c628ea4fd6deb9c3bb4c49df67ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-nubl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d6469288368855012782123f418b560a1b32af54d458e9f400d00e3c1906a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uikayanabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6418f095d020e4bb8935165e54c949e69256b8ae5af89dfd65271aafc915119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e65a13191ceec389b8e6811300effa1bc50d71811f575660bd11d0f5dc5ff94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afigagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d52e51c718f9ab3cf8c0e2241795cc6fffef44e6a20104ee9bb01e5edbbfa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...