MAL-2025-159178 Malicious code in makan-aiga-fiufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490f8c3a2e7ab2e7c08d73b264d1ba093d0d8ea08aec97119578012192926f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uikayanabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6418f095d020e4bb8935165e54c949e69256b8ae5af89dfd65271aafc915119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yisadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9763636cd5a0f6eab7885ffa612f1dc4816d320f32436ea39d37a714794fb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a80f9aea42d0c71851b033d277518942d8855f244f3529d8c513cb8bc61778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e94799b1c6b5dbdba37dd75ab9cf202fa6b10b2d29e34485df876ecd36962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163408 Malicious code in nokire-sekiya20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd42a07524186ab4fc543ff24226ae7065fd279c4577ac72ae79a7959dcee5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gafob-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e46da3648482101d5898ed7a6fd91dd6bfc2f40944e419228445b387e9edf5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotma-anfzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a0d817c0d29e1d758aa3001efd4998a54c6896641d83f9a11d5b87b98e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161324 Malicious code in nabuf-ogauof-dofuafaosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 034ea7c47c966e0a664a40a73df48fab0959fec61071499a40f981c665cb7e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167581 Malicious code in teagood-nalikoli28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb83c5b4773930444a802132a20766a57f9f7d128182310e66a257bdffcc8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155140 Malicious code in fitra-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afbe85d4cb67484b6c0503929d72d033b73e892d99d8059e2efbdc37a542a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167993 Malicious code in teagood-yakuza35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfa87e16fd389b69c6ddac104e897b730be9edd048ec93731cb0031ffd718ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169705 Malicious code in uinsnu-lkui-kgnuanmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd71c18f1295f9d9076722baf46aec7f4ae457dfcf9f4374c1263157dcbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153265 Malicious code in avminasah-agfimagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911126f42b38ebdccf8e24361ab05dbd422b1ffc1cb97492989e889c6e43ccaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 700361fb99504f4d84b8ce593abaeee7c34ba707cdc0afe9288ad86272edb095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araoponabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05abdd841e1a12d4d19581d4efb94fe7371e0a19990432970109c6fd9e3d1ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160929 Malicious code in munir-teaars-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02277074aaa6881bceed6788a382032050d3e5da7ef6f700b039ea4aba50fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156880 Malicious code in iqbal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3440ee3e20bd8559e3ae7a075c91a9c66320889e8ad0640a16bdf9d86de592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamukbaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f596e825a9d8a7ea39890b3098f2f4a06710056d572d6b60a39b518536372d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...