MAL-2025-162616 Malicious code in nokire-kilua29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4c814b736c5f28b1111ed7d37474454ca5d54c7d2f1c971c613b64b97b19b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162217 Malicious code in nokire-abimanyu98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a465393030e4a38c2cf1bd4aa60915fdaa57cf956208389dcf453b30d4b88cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155206 Malicious code in fitrok-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6724a50800ddd6c4ddbf3c1c17becfba42a03eb2504a1bdf9a4019d7f6fc9ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-mufie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e41b019e3110a50c405a97bb448270cdd35d1ecb799d21b4d11541ffce2df0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154960 Malicious code in fadila-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2562c5f7b00f0bfb540192c684d668aeb28b236b35ba7084c6272bd33b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151008 Malicious code in @miptaa02/wea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780c78b07547accf86d9aa772da84f35f6128d30b0ecc7ed1e42e18b377c7460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167115 Malicious code in teagood-manaki49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037926695e86e9ae19f2b69eaa32682df0ff87998a29e5f4884e64c2ff953a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cf61624be4d346a201b0ea00c34142112d0d8cb28e60b8ba44329b100fc262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarug-mitaiuhai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69dac3a136f3e001c7a988df6e645ae038853d8af12f61c64179130b88a2fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168532 Malicious code in tealove-nice6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb48aa5448e6c3fbf709d96eaee719fe9e5dbddfe56c1dc3347152c347c12123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159179 Malicious code in makan-aiga-iffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbc0d497064e3c873edf18fd0a729e2f796b79bda07f9fcf0dff3b119b6c070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2ea5dbb324df3584d29a1ba60f3e9fd44d3b76329f693b4c3a11e964ccf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-fazs-dgrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35bb5a88fb45684ff0c02a392629db47029ed1e52b87c078624b08f2c3ea813e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168535 Malicious code in tealove-nice9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdbcce642f1d49aa8238cbc1a330161d49a6d2b94578a9db79a0e90c290f734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153604 Malicious code in azhar-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ca057fb4f1f4047c0f50815107a59bfcbfd1e7596bf03aec021475f7db9d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nasfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a111fc7872e04c2da607fa294cca90dc5536535481ecfa87b0d6f356341f382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-nuaio-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4138088002e645d841777c757e37f161c34f4802a645a6c28084a496aaf46484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luliui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc98b1f89dd8a1a98864038a6c003a40fb3379644fd26ad2cb8dc8cef17a8f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkbhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef1edbf3d48803a50c9d7ec887ef0cb5a368461ff0d2363d3ac7ab74fc278e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bismayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a91b00c34774fbd5232caf79e3dd52f8b3f0dda33803db4ef35b76335ca0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...