MAL-2025-159035 Malicious code in mahnud-magu-gomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e425cf15fb78a109e9818eba5a1c46ecb9c5a457708878ba7fe2105d34bf4bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168495 Malicious code in tealove-nice18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac496254153fac2afd34c7bddc4a37a4fdf0c5e6f45c01d46d5664fb57a631b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032d851f7bf6dbb708edfde623446102159280effe2b39bbab5314ab1a32c639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-upaimumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9693ce0bbbe745088a53060533c005019cbe9c000b0a46afdf574347e0e96095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-naki-iyuulaaimuap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c084740314f8ea02c65e1004f4eabb308b0b781991a1a1c702985af5be602232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439b295c358610198e29f9e6b4544af67a7304c6084f44bace2d7cb5c1bbf2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac7324cb238a16750e67b21c2fec9b2fe6eed5a8c14460ba57de59ef814bf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lki-kopnaimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eae449867af55476892dee589e2a88e8ea26b6ba02622e9694e2e298c1e5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nyani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6902cde8f7be375abd955cf38c1f34a22b3ca1d9fa0b687401c4c22134c0593f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagais-ifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822e1648daef5f241b4dcef47f3a4e5b7f6784fa5297f3a6b63f829220c8bf64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-figanafyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb619f73fe70c409ae65ee06a43657b7c4f47f7ae1c5d61dd028d42375a079b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156829 Malicious code in iqbal-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bc106b77b7ddf322f1ebae0dc4cff1bb1d15fbcfe994ed63e2a26096ca4a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170515 Malicious code in verify-ticaul-bisuaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c457073b746fcfb8ab2d562c1e811e21c63f686d9d663d182c4827ba70212a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169339 Malicious code in turisna-gd-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762ecda3aae96f19460a80dbde5faae964bb1b3b9aaf86b24eb1512fe650ae4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161453 Malicious code in nabuf-otimmn-afofsaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4207c6945a51979b37437999d8f7a7c7a07d53e4d33d6e573c09493d705507cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163126 Malicious code in nokire-namiresan70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94af342775c479fcd8c86cfdbf5fd8a6b1d6a284e0655c4da5f3ce2ad533379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168243 Malicious code in tealove-dana36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423fdafd993c40c2aa9cf8358101a39854185d78c84ece96450d29cdbaddd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nitroacer-te (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd108167a53bf918e94a6e4a048e817b3e19e4de6c8dedab8862e70e6f08be65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a8a6fc7fd13dff20f831cdcd2128eb352bc526b395a06365fd3a1424dd83fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9192ae2662760f2eabbdc122df15f3e5af07f07fef3cde4705b2a91bcdb19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...