MAL-2025-159992 Malicious code in manuffak-angabofi-guna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51800f4e3b73ffa501a0eefe18f62eb28c68d6426dabdde3031090d9aa15ab35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152653 Malicious code in andriani-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d993b8563e79fd7546423d26ea639c9f4178eda8d1d88bea9742a765045c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobi-amsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e514a443f39970170b1564e8052459ba11ea9ce66914539793a86d8829971511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165715 Malicious code in samehada-saazs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66817cd7397cfd42c3a2a39dd23211d52028daf8a3f14d6986f45aa0b7b6b445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-janiutabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ad3ff7c9acc8f59128afa520fdc88bf359a7470ba1329b8c6e5c0fb9a86ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150836 Malicious code in @miptaa02/miqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbc12d1f0743f273d33d0bd9ee7701e4eea8e0fb1deea5dd7c64e194b98611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52dea13b0b4730a2d0735716e33bc2c26d70bd871bc6a35229e6972c5d56055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169174 Malicious code in trevora-cir120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a9a561dc3ebd6c2ba3776182e09fc8622d522079e4035162c833f71877420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79af970ea74d1ef1042604022f8e649cbecad7bf0c3d6907b060620e98203112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9863d076cbffbf9387f92fc2f38d1a1753f9cbad7735d178c98c7029185a815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b74bd1008f39f2dde70529f17818bff5b152dc6375508094c70e8cf2f7df5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vakuakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4865e60f811a709cf4269d5031d630476fefeffc57bdc74854960596bef22058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33071a9a975c970b9729ff70d8c8882e66bdf8147fc27e82c72b80e903f1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9753fa69a94f7d545a8ba7df21c0a464b795aa531f80fcce69554ec0f6826eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mutafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e615a8a7dfd4a48523cc56058d4c0b0742da182d57e6863df52e40aff5472040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhaffi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ba1e5847d002d1c9a7f6d3c21c31702480e6557ee0e62f857248613e9922aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154862 Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158704 Malicious code in lookingan-namakita88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a440f9323a6afd913fbbc0c04987205ce387195643df52d17eebcb3c59cc6b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160436 Malicious code in milisa-mioya-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3849a1cd6ba4c8f8baaeae495563d690f34b85c372cf6b65d0d829dc43d02c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167070 Malicious code in teagood-manaki1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfe1101a8698ab8bda2c496f06a03c526939c648b4edb2f5bd1f7edeb22cd0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...