MAL-2025-158386 Malicious code in lookingan-nakomi28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640eb5d4b6898355e5cc4809ecbd0d287ac86795b0ccc29212786429d3e389d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156330 Malicious code in inagi-vuma-nuaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2346d543f73d19efa6a6a3cc164df710b415049539bacef1439c0ce6f5c6a7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154600 Malicious code in dian-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfaf8900f13e5a3a486380966b17d15792bcc682e52d2e0b42c23907b04b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150143 Malicious code in @mipta1/mikfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd054e17ba0cf2064a9421360bffc3864c6015a2df5a37803621cc5116975149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167290 Malicious code in teagood-nakamala27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f9166bcc06273b78753b1b3a8ba28b7cca4c1f826ac0f5c94525c960709763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasd-as12as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1501938d26baac27d1d9d2bd5094fa8bbf40d318be0300f5894cefa6501dd90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa437d3230c47c2c416035501226f61d6823b315694bb83956539ba3a108088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mayfadgai-trega-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afd47b81b8b857fe28489123bc61d523a3ba5b561e0fbf0ff5016fcfde7bcaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cede944656044dbe86fcbd24b7a386653b249221204a86110e6206a45ef0285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f725abd64dca64eade4447eecbfeac8560543198364e88ab6be1fe62d936b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiuple-amua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8937c1f721f749177dd4ba64b72186d3c8b0e1492b1916805fef6d5f3be6acea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumafe-naguu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02eeb25f96397057e7dda63627ba83c29117d79d5c1d6d2e81b0dced1219ec42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d4ce84f401815984ae1c82187ca8074413fda12940089a4dd16ec6587c6fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f55c00be90ad8a2a531940884e53d89af9c9ccea2c6f2668eaa7c07eea5680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rasadzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d717941d7a162691367d204aaf9642a6834ad60f29f77cc7ba050c6c9d02ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77b84b1c69710128ce41abf03b03a49ba908464b18013cac9f0e2419e9ad7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159373 Malicious code in manadsi-safda-munarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5218a446a0a9cddd78b00177ded6deb956a1cc92544af09db9c9df12676cd2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168362 Malicious code in tealove-lady8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a933fbd2867dff227dd0944c2bce3a623c03ad9bb1393b00d546cf2036252bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165250 Malicious code in ruji-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfda109f0435166414daa4ee80ee893e280194fdf8d3da4b999c097d143a78e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150067 Malicious code in @mipta1/isyoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282992dd766b1b426f1f9ca5e9dbd146788d7238cbef01883dfef47f0b718f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...