MAL-2025-168847 Malicious code in technical-albiko-tinga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731930e8a9d7a6da68e186459cabaebe78cab045115c2456b2aa83c4aaaede1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-lisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a03010579f7701606e5649ea2c9410e03764f39ce5ae787fb6f96a0db7681b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166480 Malicious code in sunderlan-uyud-vamukaaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4090c532416897ded6d1c61711fdd78007eb8874fc294b32867a94a2c67842c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169247 Malicious code in trevora-cir51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9634cc9dffab094e9c48009248b4cfcbd9c904b4a8aaf4e8092d11be7c28b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4c7e52e8fa8103fcd111e4c8990207b46b8dd7592f25deef15ffe81a8f05b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157296 Malicious code in kamasada-nuati-esp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec5874e61e8b201164fe9ab66d85441d5ba0b3d00084623b5c515b51d2d48a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/madan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368724ba58a6d0414d6d8c8809471405df5a76e96aeb5d690f691a017924adb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162081 Malicious code in nokiragne-afgaafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebd1ef1863d5a5342a1ccbef93f4254d61db35496b3c02cf78696d3baa1fb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151033 Malicious code in @miptaa02/witaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27f8865ce8b5753e086c4247df4436d40d248b0ff7417cbc893a29095622987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutr-ssads-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fe8be05f6c1f72095df92ee7c1bf020e3f3d0fcf0f9262482127a77ee1a86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-gans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26021d7a29aadb481e139baedd02ff1badb0b805f0a0f8a2ab28610a6e63e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157012 Malicious code in jeep-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e80c43be16fa4235dede1d4ea13d3274181479ccc459fb180beb53e57059c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13cf1f99894e8efea08a5a642e2e31ab37b3b1bdf1fc7dbc80505d945b6cb397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168236 Malicious code in tealove-dana3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a16d0f3974e9f0707689185a277637c3d97c25caf33f48bef5845ad32694da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165142 Malicious code in riyanto-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba7e61a176cce6460e06d1bf61684af513d477efec8687096c1327f529ec1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150598 Malicious code in @miptaa02/ewias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a60cdeb026fe07f6c79c157649ac670247c4b3ba010aa610b4c931018319c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e79fff4b73d2c11d156c12d2806915f46fd43ff11da8eae03d927689568302d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168347 Malicious code in tealove-lady4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30eda19e1cfdedafc662230da22d459574806d4f82199b71e453e3633670806f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbddc4aa320c42cfdea199306c086124c52e2dce46d3e8c1de00919d72d8d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162671 Malicious code in nokire-kilua78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e0c2c5df210b193d7b97a0bfd8c1db6c87295badcaa3cb99456debbc124c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...