MAL-2025-163723 Malicious code in nudela-af-gfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b7f2b96c029853e43a7203d86e9fdbb146c93ecf9441457cf9bbb3612093ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cd6326cfe5a0deea565bd9890345293a028f703b09bf927849910829132c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158039 Malicious code in layla-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddddb11d93efd3c205405c2dc0b621ea497028b98d8d56cd781e4698ee7dd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168057 Malicious code in teagood-yakuza94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aca11e8a2aac040afd25ef06717d6c7051c19321eb693abd44b1445b3c51ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619420c9ac2d8d81c2e667f6cb740efb5c597fee1295ea1db4a322cb7b87489a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuatia-veasoto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5fd92e56ae00dd799f2e0d68f0049f9d19ec6051c9ca5e452049ca000324d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumaf-nagafufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c1f7902a10e69d24b83fb4ce602cc447ffaa02e6d3b3d53359144bbb06b645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-aramiafaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c580683eb05bba8767e869c05bd46a870b9c763c312e90723d617be05cd58a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bisuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6ff5dc66472c05ef6ab8f65ccd1c55e8788219741d537212e8c3af3ec07ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5689c2b032c99533df3bc1308552c3726be7b60aaea27441a3e1673497f0429a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd83394be1396cc5f112d3b9ec96e99c5a17eeef17cb0df17c4c37f260c29467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-butyagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f8b2715ef62fdfb7d3269a8b1b76be18d7616435f4823857ad7b8e7ae94cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e0d3a15498aed66ef43d685676c1f48893d4166d35367bb7609d9a776fb585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimokafiganguogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edee5d2b1d56a43c084713c630bf39673822c7d76ad0dd44cb3bacd24c67e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saubali-nanliui-iuyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f6fded05df8942b933e88a09096a8b4ae6b9a9dc226a221a5c2a8ee735c3ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163354 Malicious code in nokire-rara63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8783f25b31d792fedb609826d8da3e678bc45643431bbe3cdfc4674324058e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9db8bdf4d232ba71c37dad044d67a25d0fb95ad6389e2919444e03c69123e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2160b1893e949b1cd1ebc7972a709dd36398a214e04103ca09509221e954db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f480f6cc844c019624fc757b76ff79d1fedea008f92df1006e28c9a604e738ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab827a094f982c597acff609916be6f954b93d265806bb8fbf8c8f3603dc6834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...