MAL-2025-154985 Malicious code in fatidra-faradada-tatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76748464a4f76af89f441e4cbd73e1d604639e39ae7fe5283149946523ef8def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164985 Malicious code in rival-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2de0d0eecbf68e5d1935b7a80766966d4f17987f5da648963e6fe494ccea042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167407 Malicious code in teagood-nalikami132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b395f386284b958abf3e6b88fb1a532adf7765638ca119718aaf333eef95a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166819 Malicious code in teagood-cuekin52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27349d549bdbf4735d784fc1018955f36d1b1ec3f03f68dfb4b6f38d6177dd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6aafa0feccfa4977e7dc786e0ec8f23112bbbe878e8ea02ffc10e61428e1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamukanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dca7c4484b3d96ca7390a13d72345715eb07ccb3bd47fe22a01b9456e98b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d901d0948ec6c43ad27e577f39d3c7a670f34098b490c7e780f8004b9caecfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02fe6e5b6ba47f69aa45f8e6d0a8ab7d048b4ef3db5e48ac1d819542809e878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-lukzi-ilmuzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacf61fa2402eab88fa3f01f9d431e5ca767dbe67960cc44bb7d9218b8c6a563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36268776e59d43c0d6f2a291791caa37f2f77b9cb99e3df29a3b645ed8fa58be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-mut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc73805735fb6d8aed233b3cdf95697a663040559788093c4564c6d3127131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-usar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ab10cf2f844fec293daf9c9d7a522f592b1b425e9f82ce698e5e3968c6764c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f2cbd5bf7c76f406e84ddb714274ceaefde23e1c96ad6d22911d140a634f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-lukamlaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c5aa6a2b9c92ee0b20d1fc51a80a52c58ea227a2c93c8a4f8ae3cae368fea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bef34922534e47f33a6ce47d589012ff44d96e14e04b493233c59636e7620bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luimu-kinuani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f41000c67cdeb35b0395eb0fb7e46969e163368d27aa240a06ba974063381b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743cbe6389e3dcb8cac1b79790137ce3caf485cc8a5cbd5e8abb051a85d48173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9a767ea3743e4b48f1bc6937482d615725d6534f98dbadfa50af5e2910dbe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fagsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189ad4dc09e5077e693f2318f492ecf71a75d19889c1445665ed5d4a2f26ac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd1fd1647a84a0ff1cf8f50a50d00262fa968152092ce433fb4714263fe2df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...