MAL-2025-168521 Malicious code in tealove-nice41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89452e5344d28dad3e23c813f0934f9f2d5c05349e42d4b4c11ab3f0de27bdad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150719 Malicious code in @miptaa02/icdgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5c062467e809e18788002d26e2b0dd12d053f8a8609bf1bea2690fccf0c48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152497 Malicious code in alvira-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7c0366776dfd45367ad7d710510e7c175cbcb5ef55babddca83a6120255be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5659ce526888cf6c3f351501474128cac45ba09349d9b17d32a67b9ddd3086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-dgds-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969c958c342079f989e9df08cafb4212025ff4b1b18ebfb269b169d260a676f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf40dc6a63e877c97edf56f5663c9adc12d27ff0c685b80fd838c67b9d37cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13cdd3784ef6be80436f75b596ec9a11484d3c5bf74285d32489cbe279bd979d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 597ffee1e53a308697949bfa0e0b0c531e003c70b2a8aa82fcabdd422546dfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokigragne-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f0a98ce55f7a5e0476f2bee8aa563b38de0587815579e34a3ad7f2ad3176c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd77b5f5e81b950eb500f80f2a2e06df6d62185b3b9885f77619d18e580ebfb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161302 Malicious code in nabila-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e35bce9fc8b60ce393dd1cabaf60586954736b621e69cbc37ea6f4c918a4f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161552 Malicious code in nabuf-otmbin-nuyaagfgad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6cde77c1349f2b7277570b6ec13536be0fa348644fee09866d640bb01911f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150650 Malicious code in @miptaa02/fih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dfc77cda7b37c400d96d6c4d64c771dd41ae38082f1c8a6311fcaf6e6f87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-butyaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5668ccc6b69de9135a9401444c49d801082be42afff00d9f08c88500791f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomfmadi-munaigaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b258b7833907bfa9369353cabb5cda1ab8ad8edc563f826236b6d22508f3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilpe-araunsuiogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbe433bcdd03de9e66676b82837641a8a9fce27045b10f5ec7d7ca86eff068b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016b219f1384278e3f1ccae7551aef8b76baf754ae567e964959774ead17397a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27875b75c1fc91744752e50c1db0e22971a946aca6382664294537f726e1debd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulikoniuta-igugkfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ceb40d97ccf809cc364fe1a3fd35eb9c572c928de4c4302e9c2d77b8aca5ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165053 Malicious code in rival-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b010306801ebdb9db6e94a32d35f4d925582f1b2bc007c3eacdf60c0a48d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...