MAL-2025-158565 Malicious code in lookingan-namakiki53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733858fe9406bcf43126c5eb872456b9a95152184300be9de4ead29d09c8341c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165813 Malicious code in sfga-trud-sfhjk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4369bade9bca95a1b65f2ce2ab8dde3034543db73008866c8f03d278d0200dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164693 Malicious code in rino-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6650198f0017fc5213dee2883cb2f10005e0eef01cfb83358f3af57d3b4a4639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155329 Malicious code in goodmanmax9250-calm-think (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829085675098119c01dc98a5adfe838bd320dfa8345952fea980bdf7dbb8008b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150673 Malicious code in @miptaa02/fsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4aff69e1c56951a72fe5de2d3bc673d79b799eab582f6aab2a5fe3342d0ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160020 Malicious code in manuk-nanagai-iugbnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9f8c2433fabe6c4a8b920d48814bb0e950bec734740bb14477e263af4f7e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168783 Malicious code in tealoveness54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a3d27b2c4df5c4a248ec989303dba65a8caeb4b02b650458414cab4406edab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159021 Malicious code in mahnud-magfu-gomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68bfa20cb9d11f58719fca22f7036149013e4ec272438abf76f0ecf5507111f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170559 Malicious code in wulan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131a5f910599783d9827a72e85ee68867af77c422096353feb5490d88c53bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09542ec8171d3752da88443a5a0a1ba758ecf7555a7fc2c05d36267ea94cf13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e25684c13a6cd705d15ccee4f7404edf01fc9e2b0a40a3220d9006a59527652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masiolan-ofani-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dbd70bcce3fa489cb04fec7f4d80fc2afc4d4f24d2a732efeb0fe6eaa2ec7ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafaru-mus-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aee161944c567d052d052a765ecac63097c729e41f3dc035028d4c181c6ed2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-co-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d6a9164fe6db67415759f5837d923911cd8cf5aafbece186d06511d9fafe0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mattu-nagyaa-nuaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8652ed08cbbc5077cc2880ce701f649917a1cc23bb0a40a8866d743412cc510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-reff-sdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6ed70f4f576eeb8a17ff8391b82f83718b10d3c651648a2c184e28962a17f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1580e43ef2e0d44dab482ee9b997f6a422f31ec78a70f8e9ab0dae8ef7eeed8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079e21abc43004e78566b65cda2f61b37c054b460c488ea09e1906d08ac4bfb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47870018d2563f323157446660bfa03252853c504d14dd8f066267505614f48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd547c40c0b120c7bef0ab487bf8bb7b3bfb639fa1e6748a270e3d866f147bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...