MAL-2025-168441 Malicious code in tealove-nanami13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c6f2043256461201c942fd26e688413b0034ca1870fba4a04c99d7e239074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-midadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a9eaa99b2188b2808cf7417846a82ee33db3bd4379458851d8f5193629278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159579 Malicious code in mand-nofaf-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d0572ac04ef836f84ffba9b06a1c890ab24bbff0ff41a7f8e6126b393a4fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166510 Malicious code in syahlan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca333eb7fa88cc9df6db7ddcfa724d37fe733ca4791e09389a66d80cf90a3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155788 Malicious code in huda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b105ea58b369139c07d139373484c56a591ebf075191dedc073c9145845584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164960 Malicious code in rita-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833f342be2c6fc26cc492a54ee32d925571d460c4a5128c9c5405ece80a68255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158231 Malicious code in lintang-tea69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa266893a6b527eec631b6012114462e730ff91dbc984fd48ea661b90d4c1388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150686 Malicious code in @miptaa02/gfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25934ae8ebb54ce00e0222112852216c28eeb822b54dc35f0980dd430cd8063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161564 Malicious code in nabuf-otmbin-nuyasfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af60e74b9dbaa2fbd7f84b436d4138a7015168628e196df1d1e3c66f514a5e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158452 Malicious code in lookingan-nalako42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60622a0e64376ba428ef2d1d2a4f644aaff9eb4a0170cb24148370f694ee189a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167747 Malicious code in teagood-namakai88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dc57f4e96710a8a6f6f025aa97ead486a565a2b78e4695fa39c5226788a95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160852 Malicious code in mundya-misptasa-afsda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9d3348634828e9f6b15df58f4685b8b266bd25e0338f7ae58529eadb2c9354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe4babc9c3c506d4c3466693790aac4a9d6df33fd77ceb6a5a0a6719da39030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153286 Malicious code in avminh-afaais-figufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f602d230f8ecd9220369efc7fe72042ab296c3512eaa99218d8ce3b8a8cf01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tobrut-hen-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b0f2b18ed885bd56eb53496c01ded3cfaeb84fcbf51c1141905641ef554872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c3b0d40d239ac97ddad3c8a9624e0cbd111e33061517e2e46cf693aad60bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-kronos-warp-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46463893d487d5780c5b22490344844b9a5e96f1b8502d896a2839501e0e8b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-prompts-xenos-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee820c35d475c176e55f15d2ab1c6e6291ac53809a568f4ce77a90c5700fd41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...