MAL-2025-161287 Malicious code in nabila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f41288741b796dd8505ebbb21f7f5e095f0476b5ab46da091f95a7647cda3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168701 Malicious code in tealove-reborn26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e889b3b36338eed8e0176f8bac8f98b87e640b4a378ab704693f3d900ea8505e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165916 Malicious code in shilang-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf003d3e14cdd6e34ac865f743034379a2efc6ff3c74af26a326216bc847a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150568 Malicious code in @miptaa02/dfzg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059478075ae0e0c22450eb025d60c605b092c6ec634768f5abe7ae00a4e46001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151108 Malicious code in abeh-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8154041888defa36a6267dd199b1c0e0bdecfefd6438b62dfbd21c9e10233a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167076 Malicious code in teagood-manaki13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331ff5cb22fa77657b8120f2b591a414cfbabc78841170d015efd2a3b08857db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167865 Malicious code in teagood-yakuna104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b26da87bd705b92797975497d0b2da3efbe6ca272e765b23c9ece110370d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159484 Malicious code in manadsi-sorddi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b314f227125d9b4b19e9eea7bf6e382bbf03b1c0399e40eac00131db135c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163146 Malicious code in nokire-namiresan89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73c2ce85d9ce9f0aa807bdaba4c71e03e1fa9fcc61a5abd0cec68de4251fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150432 Malicious code in @mipta19/s-lacv-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e093a414faa74bb39c7ea5601b460b5b7992907d96f6bb05b923f8e8c5846cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8865cf4804a195797b48e5ff6bd8f4831d028de3e4847a96270f51dce87a77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igo-jaigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb1305a5ca6f083f5aa6e93b664de9db23a5f4953f0083b851a676cfd3f954ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f37e2797f20831765f7802ef1ff9ae52570b476efafeac4cc55ebea8556d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c41fc8e29d79f1dd6aa634c5ff4b58270b57bfac8a8d21ae5240b5c68e70c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d591f0fa6c337eac285f09523e5019907f9ea0c171be3d1e91fefb4fd70a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b4a70563a96a7c262275e44147ad86cbdb9716d884f28f991eb9ed58964eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cfa54e7c0e67e792d944a5e09b82d4892ad41874e5c83a5e3ce893c412f17a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27075a1817e73e6b05d6f1d5523415b0efdae5d7a9fa4ed690f9609d075e0da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tudasd-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0317778ec95fb166717bb10783ddc8d3dc3dd0f2c0dd40bd49e2ce22a0b338f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminsah-afbafgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4692420c12c3744d1504541ab79087368c3a3a5ca50785acc99736e4ce7404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...