MAL-2025-165586 Malicious code in saku-ai-upsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2dc2531f9fb99d8c23d5d3ac58b09fce4c6dda5900c6a41b33fb2547f603b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157534 Malicious code in kentung-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67303e3cba5a839d1af88dafa180b47a1fed90dc90e2fe0ddc43678cc7c7d378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156483 Malicious code in inal-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3095d3a02a7d5c63604dd3b5d487e12218251cf3e00110dc96d25965178a237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170099 Malicious code in upa-lubalauvalio-ilualsgsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc33b4d1d01b3228b2c33a237aa725d518048ab09d973da6a9c69bf3b9bd4895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-ddxsdga-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808a97a504b287f4425bb4d5355bc75ee0a4edc5ac702ec18ff42f3798a689a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miftaikyy/rssosya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de59643cb3bfa319b374ca34e698ba13b18c91997a0732f2e66f0c3ad3c16f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-aurusta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04feb3acda531da9a55092242e68d0166df02c4faae77568011ae68852d40ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0055c08696143cf961bd9cbf2c10cb6b4fbcc990d6312aacecec8af3eea93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a4eb7f2da7853e09aeffb579eacda1d956b72cfad5ff3ec8ce83d627a1a736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogof-dasgsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d0bfd225c9361225e8f288eb5cad55591b26b8492f56e883a2ed8cb6a5c2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385349fe09696a89c21db68cf49ca78bbe9a97ecc18ecb7334820428a512cf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6689399b0d8a962300eb6924306e8bc0996c4d21d8bce88112c91f38c5c2f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5fabc6f03ab03c51bd9d0037fd778488de89286a6912fce162530ced5eb60a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-sufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facb40567e7bd2589c38e1629d7df1fa39660a38002fb58d8f7cb5e21f8ac52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiua-mobhani-ayumasnoomsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca3c036e09a7cd51556d7d15b2c1fb4033011d134822149ae7faa3592b26987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a057e94b830ba8e1807669f78a8aacf36dd345bfc63d6b5001915c212d092b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fss-3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc80d6f08854060bddee6905a4bf76fdcfed4114bbb64c4ea4ec2b97c617854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-namuda-miopd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ae08edf8521a183bb24f1d063e360a3c8f786c77ab0854695e469ee9800787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-tyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae5707a97ebf3a7984b3e65773a49668550bcf09820ef545e1a019ed296dc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902319a3bf7446f2af4317d717d199a320ef5d186dd40858be812a18924d28b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...