MAL-2025-168164 Malicious code in tealove-coki1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f2165aa2c5a3abd122d1a542037c72e81a01d02ad22aad35a47e8be75b4032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161034 Malicious code in musik-daistv-bodot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbe5fd834d8957074b644433805a1c25aa1b3dcf1569747bd368a936a532396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160141 Malicious code in masako-b-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f765ae98ea33e70b51a5a92f6e8c0b6f1292c1671739c78b147ad047ad2df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163221 Malicious code in nokire-nana65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0ee4fe0cfe410bdbfe4367022926a6615644580b75febe6b5b77f24ac986ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159202 Malicious code in makan-aigooa-iutamafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82846f411b9c7ba4dbfa03aa511f706105aa1107c5913cf8909f123050ea3b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159515 Malicious code in manaf-assin-nsaadsbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d077c5ce35eec685c86cf364cef410b0a2895cc578ee199a0d479b547fac3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163984 Malicious code in parwo-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4edd24f78df749b1f9dfaca50dc09ff4685efdd095442a101acb7ce84ab6b172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mar-safufrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e3939ff6d64a8fb566a0d366138ae78564b9d20e85374247afc032ef21b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mabadvta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc405b9b05fd885664639aa91653d2609f170a49f3c35895d421ffbfcd1b940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotimi-kilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dea638be83df92b9d12c415726bd5aba3bfe960a3f150ca92e98eb1e102429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoiman-igaaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1feddde447a46a27014dea0648a558a66a194525dbea098cfda02544cb8b3bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufayu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f26840fb2b4e159567aa518d3cd0e75b0b2f601b828ed03c3865301e6b64066d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ffsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04c48e0b981707d4c16ba42588522af867eb9512ace15f259d04bb91dfe1745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3848be3adeca50cc4d769e6253b8bb5aafc9fea154aef8972d39874860ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449631ed42836f10a86ebf349548f770fc3b022083810d9644706d93052a9490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uki-vilakunnami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3d6bb589c8075775a35b066ed9ba76b85562ba09afa6198dc7db6ffecd6df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maalasha-nut-posisioninh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4d9ae93d07683953350ec5304be5284b5afbc2ddc297b6fe7ca7959758de38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ec9dbd1656a5e0b1df8f792c05eaca0118f07e136f5881af27e0f33827902c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfeg-nahahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76962255f5715aaa1f9df0e01606c66a3b786345e778a245e009f2f6b44f27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbe5f2f77b65c783e587b1c731a934b81731933e33a0f8a915adea432d4e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...