MAL-2025-167055 Malicious code in teagood-lokina86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f2cbd5bf7c76f406e84ddb714274ceaefde23e1c96ad6d22911d140a634f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166681 Malicious code in tadashi-tssu-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad217cdadac539bf6f78f49b2f6a90122493aaac8ea61bf6a8d131bb1105879e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155799 Malicious code in huda-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d6a41649a027f5d9e530d7f3795956d90da5c1e95f0f79c49e809bd023e186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163761 Malicious code in nudela-gagaa0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17630f10176f7b53f14f0e26d41236f74106d95e82e18d47bec41b864f7b527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151602 Malicious code in abuibanua-mobiman-arayta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e7afe2d1e8e95f8c3bad40987f32f7299f6abaa37bede9656b98d7b21af5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158150 Malicious code in lina-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abf74803326fedb4c1484554d9cbe73e4ad01525bad4ed3abfb00270b1516c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155340 Malicious code in goodmanmax9250-model-tobacco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2a33d96c44b4308c838c1f20a838f43a540f909944535cee95d3b123a86793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164985 Malicious code in rival-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2de0d0eecbf68e5d1935b7a80766966d4f17987f5da648963e6fe494ccea042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150576 Malicious code in @miptaa02/dxsfxfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c84f91cefc6c46c190b5d17a0972f3f9ffe21231c11e01bcf10227a5bcb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158305 Malicious code in lookingan-konami44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c840145a5e16f2146eaceb7e7b81ab6ca65722a404126dacf6b2f3e20f7b23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164161 Malicious code in pilka-lni-plima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386d9612ae3c1d034ad23d13a6dfaedbcae9e543ed896fed55998215c1a21903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152630 Malicious code in analsia-akifalui-asulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c238013f9ce803d0c7ca2b14b4286ff319183daf688bef73a2098f06b8715ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166555 Malicious code in syahlan-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a696c4ef9d0cc0170fc7b1286e1ccea65b9eefa9127d08e774fc9215f846d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aku-idusanlun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945be6f2d535f81e43fdb21cb25955c35afba754683b9d2885751e53bbb129b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muiyau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c161ba709c6676441e34810374f059897d40519b9256d2dfa38743458e9d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b2213fb153547c115de1eee1e3f65bddefb1c0f8993c0c0226dc102bc4ceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipppp/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa58ae354bdb6e231cb7aab5727f0e34c4590738f9fe38a2d0fe30314157e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kali-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a071cae787eed4bd8177a018226ece6747ccbe00bbe4606214bff23e53787ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf1404abdcc3f395e0423832d196b3f812374d5b54ac3ea2921e145ca619d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3a9b3c49a9d9be8dad75f90d2142934c2b4e12056785248d37f54c094838f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...