MAL-2025-168699 Malicious code in tealove-reborn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f069d97a567c8f076c2212a2bf2e4c39b413727756dc3382f47df240ca7c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165485 Malicious code in sabua-muyaig-dafm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df531aea360df47fd1767727b5d8347d0c18758878ee6224dafc8b7913de270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159344 Malicious code in manadi-scior-nsuiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822fa5009810d7c2bffa47063937e297a4ac1a1fe8de0d1c75b1249a91a8f3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158222 Malicious code in lintang-tea60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29de61339f9960e75c8f15a1e6d69a1bf3209b71b7d61525e6c8345de6591ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154145 Malicious code in dajouka-dasdddeta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2e3d5d60cb021953f555a89e830f5be6b3c137366ee50a0bee5e570d1fffaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164951 Malicious code in rita-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73345c3c56bec91a0a6faa8353d7d09830036da3680fec19c62a883104f10d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169177 Malicious code in trevora-cir123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea439aedc93ae84b04975f7ad90c098990126066fbe383ecf30e64d17a35495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152890 Malicious code in asd-nuttr-sssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb46c94c2bafd5273e87086efe9d69ae6f031258319eb491675cd3ffee42338e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167028 Malicious code in teagood-lokina61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1770e1fd9641f0c2529e02ab094786eaa2157419c26d515ffcdcda14b70b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153142 Malicious code in avminah-fagimdas-dfgiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27bd6f7276043c0f986e924e58aaeab56f4e1d68f0f8a5da2ed22664dae3cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151699 Malicious code in aciaiaggu-idat-gda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e79276f387ce9e76ebd72bbefede4fcb12d98c4251473c647aeb02dae0857a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151331 Malicious code in abih-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b413d07012ad3fa067dd7c6a023b0c4ac338d5249abb1b01ef68efb91f5ad54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce70af63f4d8e58c9a6c33b5db397385440509d3899c4310a844c111fcaa4008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kwnhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d045478e07c8fe3cfeabeadda1e69a9a3ce52f3c54756b426c9b26d14049a9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01027fe10b1392b8872defde3427be43b372a49f1c4aa05f87e53023f9f7d53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704083e84127cc005bf97c0e36c99aee8c40133c913ff7259c0f2c45cb3bd578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5713b5dfbfa32c72399435124b04ad59f51c7befaf7efe931226c476473a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauu-ofaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3e2003b0bca9c1402f365c405bda2802564a2759915b98853120a402eb0582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6777dc195c346feca1a95777421dd1357cbbb4155da970f14cb3b65f45b5695e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-muio-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9d15d66bb2d5707de9b63e5ba11f9149f172c8d36677d190e5c6c6422d21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...