MAL-2025-153297 Malicious code in avminh-afafagia-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb78b75f407afc72ccc983b9a6f8733a28b59a35205a12b148835911d0c83c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asi-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7082c4992170ad464e148c6c23338bf096d4735eb4b975c35fb99b8a73d4487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamoli-ailasoaloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59bd08c953dbe0b01efabfac34077468847868c1986d744d43c6a0aa990637b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tualx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3b5ce1bd97dfade4859f59d11ba5cb593a62254fe75eba0ce27ad3208a792f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164477 Malicious code in polymera-manuyat-mudniosps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cbea01a8aadec1e3fb71e51e1f3d8fc7c8b7999d031017dc000d18cfdfa189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47bd7d61678c7e78b2f10dd483302db8cc819c5bfac8b5b8757925fe98a519d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac397f11739cd0bc344471db259d6c1481ca29035dad9f3a1557cef3a705d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b7fb710b8865413ffaa2c163c0b4070b28cc0e6aa74ae56c30a7ff78bce611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163767 Malicious code in nudela-gagafhf-gasfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c05b4f8aafb7ab3a2ed867501c6044ef3dcc374ddc4dfa3080b0b9b8f9e1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamukalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8df0361ec4f8e19094088eb419c49af7517679c523844fa06983c351a90db3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c1f86c559027805f24f9a9f560935fc1d8d0c06fbeebb61bd43ffde55a0c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-nubli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d3393d59ae243915f3b2820f2db6f1dd105356d7720c7dc7b06f575f48f07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-anupmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c299efbf53ef4b6c53c41c9e4738326f3c37055ec52416165d3fe8399fad5647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155342 Malicious code in goodmanmax9250-numeral-tonight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b92ba03ccbc31eaf010ff3f8a513bc375f742cfbe0d721bb535dcdfac7ced46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74578b3959db2540058a69f473a662480139e26f77e1527ac585cdc0040ccedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muy-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be034097eef67ec9fc7145850f4f54d4bee457730da4fe85ffc4489a014054a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156987 Malicious code in jeep-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe93576e307e1d02824e5846cf94db29b2ade50d946e937f59c079c5a0c4d3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-nutsyasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0f54819fbc5ecad3c985a5d696195a02ee157c82ea8e418cf09b6fc2d8528f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8e0119820105aed19aa036174fe9a43328068b04e5e52d63913e30a6079433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155482 Malicious code in guras-visa-korea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35cd69449148848ad2be5270950a319eb89e89b8cec245c56a505902408a4fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...