MAL-2025-160627 Malicious code in modirai-fuhoupia-jastfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b103adaae4c177b581038c6118252a85c03acf9a1c0bf6445cbc83fe4797e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167449 Malicious code in teagood-nalikami49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebc0b7bbac0fc873a4f73db52b1ed9f35cec636964862586f26386fe03c8fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155256 Malicious code in flight-danger-fantho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2827e22018d12b7ce72547dc3dcfcf22297acf17a3c6b8a9428d083eccee7ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166748 Malicious code in teaa-reborn50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c0beae572cc2ca68324e293529040331be099794573f0dd06b97bc2ea0b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f29efba35411847b75a22908f62fe5e94844ad84c845964e5f21415ccb6ee1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a891a6e90b7ff8443a72ad9279275c1158804594ae0add8f0115b88d28459fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce27ddf328076ffb09bd4e0082f5375eecc8c77949318409d449b4a39a65f267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirne-asaka15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094abbc8cca5ca06de7170df07abf032cf975930c6b5d989ac9774e4e74d4c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d269b7aadfdd7f7875e58a3ea6583acd8232e1a4b5209c9ec3c086ad133f7976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1c45c7e52f9fc21e425c48e36be40756d7dd6320e8ecbe5655010f114046d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec33bca619d0aa3c0334f63b1fdef050d8b07db34ab348a57652a99978e4abf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e23413a4066e6c5aff52381fd4d2bf77a4931915f5d7a6500af8ca4c0cb5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec34d1d5e29afb9a7f0d33eee8a8c8ed2eab47c074b083fb2e70f91398972b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35eb66c293e4a6dd4a461b9fbd6f8dfb94279b1a199987848f8435ea21d7f0af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-ganis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d0832590813ebd362a77d59e833f0a76d05a6bebfcc3a6ff1e330676b11d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa29c73a82bf3c740f4908a2ce9b04932d90ec8fecf2a480037e57b138bf1fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wdub1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac396b9f0cf18ee4d560cc78dc7803e0119ca179a3286b99b1e18fd04a25111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaais-ifafoafofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef38fd30ca7122fd5b169bbbd3baa6973b9053d09595611ef3a7502bc494ab31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601e8937fa9ed11acba6146bafed952ff3536e7edcde4aab8615f4e1320cdbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac8e89414622505922a2334d05271238863fa03283ced6b6dd843fc6cf0db3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...