MAL-2025-158857 Malicious code in lookingan-namalaka45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f202d335a775a7d6316c3e70ed3cac4351144a2e33a86a5901d058842c0ce16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166973 Malicious code in teagood-lokina11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e3028596ca4643d3ba03fb92021164787c4243049f22f493028ef730b4fb2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157972 Malicious code in lala-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2825b7a12a295008ee6e43bb2f51914da1fa3a756aa0866e130eb5fec4d4b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150573 Malicious code in @miptaa02/dshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa14715a954cf387f3957548a922ab0b51f559f940e6d9ff8e2c5b7b86f4208f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155867 Malicious code in ibanuni-ota-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0780c45f6044e46b6315b4ca455aa32fe4483d2b701785daf14945b1b3e01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162866 Malicious code in nokire-loklok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e3ba4c479ca9ae9835b70f7f2cccc68b69a65f7bc6c726ab461cb94f7a6fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153205 Malicious code in avminah-fagmas-diogaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b4b92b129fe9859e15b8e69bb40b5ab255c121e5d51d0e2ae4682c558584b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158720 Malicious code in lookingan-namala11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c5ea0391b3a3d646a0db3702661d4c0298a7b811e35734670319b44357676e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fda461d01b9fefb0b873369db605a4ae630e8446466e0cf917859d60a416501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alaufuai-ayavauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2856789baed54c86c252ff717e846b226497d40bc58ba80bb61b6fb5f73ec68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12pafef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38eea4dac8878df162b9c85ab448562e01273bcdd5944030e35889463bd7acc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a776d26b71757e903946970a376375cd8a4aebbf157843fae8bd2c5f32563997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5058f427006c87cfac17113fa854fc5916d9a3c8e569d1ca63cae80de4afc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f3a2391ef64f988b44b53e7700b59ec9447adc152abf510b05f137db12bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ca4e1ef0d8047b9bfe02a00dae1eddff84746e6f0ed944c011fabf631b9924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otiganaigf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e555aa4de351945119f690ba73888c92b3908c89088f89c312136c4b24fc7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kilaso-akiamko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da054e491504bb3acb2e4a6c5403c300a4d06cfe3d1c233e0cef3bd6d97dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b11f1294715e735728a4860ba6979cbff05a7dbf35f5dc972385148d2bf5007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgg-osfsps-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71007acea10155ae6545f9000060235ddff507100df21986d7f3b6d7c82e1652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaigfaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5766a91127be072a70c57b835c3a29eb97db8bd3ade37af1b6eeef3450780e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...