MAL-2025-156885 Malicious code in irashi-21-are2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7289883b839312caa1d014a1a98d0dd2a601a9f6a1f5ada0e1d864e266de2108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167696 Malicious code in teagood-namakai41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685bcce37edf19526d41758a89e13f081a2ee6eede3f886d6e88594a8f22cdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/rewfer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b191c9d5a9526e236ca9019a2b7accac636989a603f4ae2937a9ea092c8064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159597 Malicious code in mand-nomai-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0646bcb5470b1dfb09adee935ce69626bb1b606efa3efc9b72a23491688be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161408 Malicious code in nabuf-otgigaf-dofajgagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6baef1f6a78b8276e9580891d4e508d25c6802a6cd5b919c98c94d36262fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161088 Malicious code in mutaus-manis-nubli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d3393d59ae243915f3b2820f2db6f1dd105356d7720c7dc7b06f575f48f07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165985 Malicious code in siregar-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcba0ac9447bfdcda6fa59b3e7c4e90b2315430e254d9934922df515b6dabdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164308 Malicious code in pitra-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3a9159ec854555408a31f4ffccbb512542c9c2a5bcd274f7f8e6861e9b16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153781 Malicious code in bintang-tea32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64baa7b0c4f68a94ad30d74808ae27333232afa9a01ad067be0dcf19d45612ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170525 Malicious code in verify-ticul-biua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656151952a5426123f1a554585cf5d30ab963f712c3ab0eea3a32fa6d6452c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155539 Malicious code in gurs-muiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e48cdb5a3a5e8cc2c0decfeaabfb130da9d3b40b0f90bb27f8a655db433d6b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/myadra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdeb1e8e35a45c90b4cc2ee5163ece601086b93691bb53764232c3e34cc754c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-isaufy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22354cb6e15fbb35f27ed2bf4f4f281b4c3fe2d9e24f14bd35f072c0329738f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysa-buysad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3c67adaddec4fc24b788fa0123eec40615a4cfc38a441f2ff7e3b5494ad565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c374c976f5c5b3aa3d60dcfedd235a7a975cdc96b540e01fa7b3da5f8bb7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835e2d8f6a0e3d88047c85737b4acf745b9b37fb4514567ceb574842c7ce71bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e34c12bd9641dea5d9544d5000f182c949fdb45254d58bdbc32b2c0c1a9f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrio-nuyait-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d304e908d95352c4bd02a3710de24cd9568ec963be4fe6f36ba12b43425f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tila-mazola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8734e7a86372b91c99c2ce5bc6c6cad1d0efe2a47e27b94585f02189e3787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7f8e71bb6d9f563df1e4790ea3e2ee5133bfe5c4b4be3b235141675aef35a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...