MAL-2025-167941 Malicious code in teagood-yakuna79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d7c1c1ea7198e78e043073b0e27a98fd87062601c2c496e0f5817ca8e7aa14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169814 Malicious code in uinsu-lisa-amaiyaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eb7bc5fbb6c163f20ab8ae187a4739016cd0fcb73f58d361e5616a300375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157494 Malicious code in kentung-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e616034e8cefa4588e5ccf3f0576b1322afe85084036f6f61b6d620b1ae5021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d561283d4446e38370cdb6e6d46c707d9128a085bdad4919027bae05eb60f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8908d912937b35a7b5a7add43fc9756f4878d1c65747576f8190d795c4d2d5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalauvalio-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb5cbfc5621e243326564fa02860ed61938b0fdb5ae1d22f1f6eade2cfd87f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160820 Malicious code in muklis-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4737aa42377f8a77f936f9b639174e449d29eab5926e8a4de24e426f0a4ebf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151141 Malicious code in abel-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a56abb9872a865ab1e8480e99752121ca78dd1a61e2ea87e6b4b6cfc5d06ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4e60546bc0f8bdb59a6026c034c72b3fb065027b5389b7c9047553cb8500d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158459 Malicious code in lookingan-nalako49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becc161ed93b8336d000321add1b0b42ff2dd0dc6be6b53c4bc829ed0765c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyago-dafaaiffuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338d5ac6267413e08fd88c59fcc14b793f31714fe91e1a6bf4f3ea8a34e30c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122cc8524dca1c89aa2a24315ff42f90b164df5fd78412a896aa6beb7c3e4231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c8d9c91fc81b3f8b358ffa7eb7fe4857e3d6d3b64681ee310fd7d0aa4eaaae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polil-akilamu-lukiuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778343292995ba90df9ba892b5195ac2bf8e53eae75028dd1c025ef3711bfb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0f8f3826c35da96eafdb6674faf96728e57ce1746cf3dde36b78be49fb87f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5926add183e75e655b7d579830aacc4f49caa9f3127ac91db7ffc83ffff5413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muiyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8295734d6f48bf337ce25206b95088433923390fc8c00895c9be2bf743f984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164425 Malicious code in polymedr-mindatas-buipenaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098d8b15a49fe16b9f696a04ce0f99165d36b9d23c5753abab8acbed65fd7daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-radiant123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e629ac387dd199592baeea8cf9d06869d81bebb1af4a879bcf26be1495ed203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...