MAL-2025-165584 Malicious code in saku-ai-ups0i (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3fa2ceda633e7c0ad8217f6d52049b5e08934078c1ad9c48cdefccd08c46b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164976 Malicious code in rita-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8ed42a9ba35ae978d6f705ddb51c47258d6664734497f56f4154529be823ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156585 Malicious code in intan-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b5a333b728d4905db0fd8585e4ffd7e5c776150f33ca8a629557c46aed78d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc6ef8f66d185231511251779e037fa0817ed369ad5730a7452a5b0c893d2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856fc2f9617d380ddac2c0e4f7c1b3f8121d8527cd0d332fd56af5afb88a983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyau-tuyagdat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2aeafaf91533e22542c10c56822e832131cd226752e01febe95257f41db0154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvauakli-nalabulai-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 139f582dc5d92664dbe3b725730505a0b94f2ad78e6f408b4a2f189c8a319816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd517990cafe5a63700a59d93b89320527e41b8a08bf882a430175658fd05abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/faeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888b4b3d1e474c949f45d7e7fb83c79337b8d0e56cd9535106ddbae71f5a6ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908053bac86181c790cf5faed61c2778b8edec488c3ec509465eecb0294a3f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4da0e380ee08f570b8c8448442c68e759df7414e04f1bc20053e240b323d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilo-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1592157b2e35320caf2c482651553ba3c99739c84cf1e8d6cb53b5509b76ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24e706bb8d8ce38fe7c92857090fb1dae9706052fb4100827d74b3a041cafae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in turisna-reff-derfueaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb6af53bec2ab9ff95286fa12143664b387386a82064ace16097ac65ea3c3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161824 Malicious code in namasae-naiuapa-mapo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8a683f961ce4dda1b390d4734f0d93bd6ebec8198c6e35e09896a0cbb411d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimn-g0afigaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54d804010821462c60a09fe3691e23e3f64a2f2e39c9b698ac3d2b8063818b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167721 Malicious code in teagood-namakai64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639f6cc7e497a7dbc842f2b7e55940715cce7bd8b1b92981ed883ef5e9a20975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170355 Malicious code in verify-ayai-galkia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e639c647dd5e1582f798c675d057d81ee9b96810b799d4b1d327c5c065134d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150059 Malicious code in @mipta1/inila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bcf9708dcaab2020576b4667be0fb0a2c45d13fce12ac513a87f5a8cfd665a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...