MAL-2025-153525 Malicious code in avomainah-fragoias-ofatafyfau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9527ba4bdf034a323ddfb00c51f08bdb5e1494ab82777ff4d152e811775a4f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-wew-sza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9b743388e392b760143fbba35bee042d0815dd2225379e236e74c717757b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167306 Malicious code in teagood-nakamala41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747fbfa161a1b8751052de3ae32c004b603985c8229f3756efe39351000ddcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mabadvta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc405b9b05fd885664639aa91653d2609f170a49f3c35895d421ffbfcd1b940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lki-kopimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfcdb4f79fbb338be1ca765d9d562356281c85f1a1d0c00113563177a260d29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167185 Malicious code in teagood-nakama21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eabf003ef2e73b0d98d5acdb418caf69be49c697fe12fe97c12568fb5c2e8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0675635ec1983e3fe928e9b65d211e3e9e7a83c6ea5829304060b03512559ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168851 Malicious code in technical-albio-tolanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3814e211f6f871f99868205d5e4b1d53ee3d2e0cb179de10ffc31d468fb92354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156062 Malicious code in icha-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48330860a3254ff5a97e73bc56d79adf3a774d2536b9ddde56cfbbfb7b7fa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79efef2033d0cc5b27da3ea63ac33643fb4d76b600ae7ab90504d0acbf435192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151998 Malicious code in air-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf816f69d56956ae91216cced8d4e04c876c6e1eb0e17dbd136109630fc8a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/jns-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc0c03bb2d04ffc9eb406ebffed10b24f257b43cbe6ea2a411b9fd3a8f53937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153766 Malicious code in bintang-tea19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840d6e409a6024d7c715aecda69849daeef0eddd9fc69710bfcdd74f821e590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/awaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056fdece81cf3d7b506109f9e743136458312d77f3814250738b1573bec77333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-fofa-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b72760514c6272300cd2b920c35bf6dbebb43de921f6b3b2ad3665327460ad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-siafaiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164703495ba8413ef8d3d22dbdfa7b112dd8eb68ed028a666b670e4bb7f904bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167328 Malicious code in teagood-nakamala61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62239720638520f731a5f143fffe6de08051df8091a9264b83b59d620d0821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-iku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb334653ccc8524cef0ed13c805d0995d2621129e34544d85a8e4f64f6a587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-nurasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e25d79ba288b6620e1a91c4fefbe4b2b1e2c61b26bc8e764e650dd9a46861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-iklu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a784564a6d3f5bb60849370c73d38d457a4bf25cb1bdcea5211eda61466a1ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...