MAL-2025-167808 Malicious code in teagood-sukuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a2dea10637367ed2139dd37d4d782010e6ad8cca6c515db05dd8c938ff0139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166198 Malicious code in suharta-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2743cdc94066a07738dc0034a14de2fc6872817dff8f75c7880db5dcdb7213c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162846 Malicious code in nokire-lokcek88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f06454e5651feacef0d7d3ee29997094edfc6673fd13442f066656553829e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169239 Malicious code in trevora-cir44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfdfa39c5c2dbdb9d5ce4abf4e9eabf77275cfcc177607183c192635b55a9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157494 Malicious code in kentung-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e616034e8cefa4588e5ccf3f0576b1322afe85084036f6f61b6d620b1ae5021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162322 Malicious code in nokire-arhani12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e545a2d35f69cdc2d04d0a8dae1c2d7eb4096bc0af1e34d022dd48f026ff4ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169814 Malicious code in uinsu-lisa-amaiyaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb7bc5fbb6c163f20ab8ae187a4739016cd0fcb73f58d361e5616a300375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151819 Malicious code in aiboa-mioloipe-agatamiaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2af38e8b4d6a2ef3a6b9e9731bcb9bf7c3f0a3883fc9bbba32d7547a964860e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167941 Malicious code in teagood-yakuna79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d7c1c1ea7198e78e043073b0e27a98fd87062601c2c496e0f5817ca8e7aa14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158459 Malicious code in lookingan-nalako49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becc161ed93b8336d000321add1b0b42ff2dd0dc6be6b53c4bc829ed0765c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5926add183e75e655b7d579830aacc4f49caa9f3127ac91db7ffc83ffff5413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalauvalio-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb5cbfc5621e243326564fa02860ed61938b0fdb5ae1d22f1f6eade2cfd87f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-apex-spawn-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71e0a1e9cf368723f79a82fb82524b86d059fa3abe85eee3b94013aad9171af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-jabbah-google-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5d69cde5ef8f2e71faae2ebf02639ed7e17058b5e0d56f3a0b45189637526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-cluster-hexo-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8497ec4c25a6c9e25ffa655c0a28de102cd03a2893bad483366653df906f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-relay-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8df2c7171ca9261aad999cabc9cab7d7e3eb476ecbee2445af9054a0299af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-centaurus-scorpius-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3bcd92f5223ed3455308cd868500f9582e6abe1081bf9975ab41468d08a549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...