MAL-2025-160920 Malicious code in munir-nautyt-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b194dc00761acf60f181f73eb8859a8adbe22355a161b4195d952ec4578cbf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151003 Malicious code in @miptaa02/waht (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017a64e536685a1ee7c63003446abf490ffb4f3ee8b26c226f6a7831d1b86854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bb97b5f0e3c4d722d5b0418b070b72fb62915d76abd0576f26cef8014226f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alonbio-tolamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c38ce8a095904026bf31b1d85d799ff1b0f7f3485da4e8a017cf8e8e1670b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-miun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ffbaef8ebd7404c7bfdf3a3a67f1e57d7ebabca3304ca84b1727ebd5b493a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168121 Malicious code in tealove-boy16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02455dc6993c60cd8afb29c94ba0f3e62e295c98bc5bd0dd2c1128350ae4e67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153803 Malicious code in bitha-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2118a02700f11ae5ae19b93c46d65ab2fa2124bab75b22bbae41165b40a4dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d7c19e4707d8695790840ba95c17ec4a68998ff7d23fbb9bfb3e5face280e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150729 Malicious code in @miptaa02/ijc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e62912b9c68b933e52bede732bc5ef8f8063204d3fa4650c066676dfa37b4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164605 Malicious code in ramadan-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff11270ff8c6e628dc70950d95e6e0b7b02d67185b45fef7c16426905b5fbccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152743 Malicious code in arif-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abbae48b7afede2b605bd36bd490635b9775b3440b588d36c31cfc9bdcf91f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-alaah-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30dc0fc4479dd3795cea8dc062294df4f903e2d10fe5a6a83ac594bbf165b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151830 Malicious code in aiboa-mioloipe-agt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10e94d82929497fcd33b061af0d96000e5608e09bf6f82fdc4d58b8f8a30cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnias-ifiafagigaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc5deae1aa735a2237946dea2a2126be972ae8bf24375ad3e3299421433897b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169775 Malicious code in uinsnu-lotipmi-kilr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5e97da9c7df24511bba803af050c292339c6206634198a49df2f9a0a88c28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162216 Malicious code in nokire-abimanyu977 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 779dc959cc74dfc44a0115ff44d2d3ab76b203305ffeb5cccaa7bf254b1659a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobai-jgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763b6adca64507dfd46c313b5072f7fcd26a20c08bb43e571f9b7dacaa7576ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e4dd2d89701895f36ad17ab756a2809f9d37933207c4c45c82d3522688ac73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d516e6bbddc780bfdabd628a457b02526d0c0bb203311d3c9e43517287fc062e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...