MAL-2025-168092 Malicious code in tealove-aruma36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f510d7655d504e4c01651ceb6361922e77bfb5157c5e518fcf7cd85fe0a02869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151060 Malicious code in abang-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b465fdbd4c69e18c5afb7190097748be218b78b43840d703dc8a6533b8b6d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170133 Malicious code in upilka-luzi-ilmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b6ffa6fe7cd14b9f6af57d167725dfe1bc1418c52eb62cf4333bd154404ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166703 Malicious code in tea-osss-tepani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0167663bb1554745a62f0330ce9f8bc6c8b7e1889e1614e6193aefde0059c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169643 Malicious code in ucok-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe3781064dfd3568fa33107987ae55615cb15bf49abc82d648438420a1048bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167507 Malicious code in teagood-nalikoli10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef09c09438ad9b3646d53f0adf185bd3ef3a5150d1169f2855116c15afdd436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163559 Malicious code in nokire-zabuza67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace9d185a829f6a3afd90007af9244e4e1bb3bd531a2a19800285f8e62c6c980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-nyaiauafamatua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfa041fa7af8333e418add2f62d99f4fd211ff5fd9a9e8d441a5d367240b29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilope-araniogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b461b2ae6975bb4efe3bc1340f848e4d0f4c612c50b9ec58187ee19cc900b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9d71eaac64cbf261242f3b7814c0918bf01af3b2076835a4b474eb33e4a8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3573405ec2d2dc06b424ce2b6c03ae0e8919cc42228f364efcdea2f011db1f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be75ad44e242fd61b5ae967baac6eb57361a1b3d07aaafa32cb998cfd98a954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lki-kagbdsasodgoasdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3043a663ebca217f79fcb0e991c2e89d89fad87c8d79c6e17d33c70a943b7449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpe-amuasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242ba9db2a4e8865fc8502650d6406a49d3f5c88d9d7f535a66982b1e1bc3de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2062bf37ed550aace561e68187e7ce7ba486fb0f8f3c835b6e5115ddd95deed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf41c902c454064ef703e1163f64c77fb29540b1a6d9a79ef1b78fe7e36b92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58af83165704989622a117559aef42a03f186273293278b2e3fd9348115178fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tsegr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05269250a31646327ad8768811775cbfd28c8a79d9e0a0a79359623a4a9eef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vaukuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c6070325c17b104f35ca540ffb2399e2c2e0129f0de85f18671758ea66ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-namuda-sfas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb01e96f452ceb61d75eed06308869cd4e78f8363ea7e4643bcda208b409e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...