MAL-2025-162045 Malicious code in naut-tyutu-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedeecaca47930e6d81eaca14d5483b9a8006c2aa2337b015c853a56c8d5f884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150979 Malicious code in @miptaa02/tiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b09bc284d23eb2b48468391af3c90b3062fe2f731b917fbc2daf84af1bb490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159244 Malicious code in makanabi-aibia-ufuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fe051c8e7d67565ae463dd856e23e2b04d9ca0ca6aee6166c2ef56d1683323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160145 Malicious code in masako-bende-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b702724003aecb1deaf9519ec1df0b94e3a8b2e8116ffb08ba47ff5034c6f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168281 Malicious code in tealove-darknest25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e62d9da494a5dee707da67f7014a50b5dd1bff21c06d259376af617e1581b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163299 Malicious code in nokire-rara13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3173a3bc880af3652bd0943136db29c1d22e3c252c45089e7c8d9ca58f0a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipppp/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa58ae354bdb6e231cb7aab5727f0e34c4590738f9fe38a2d0fe30314157e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd28af01854ff8492a506ee5486f9e0f0e54ccfc846361cacca6681c5a0d0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35ff2e4484317336a8f6b70c453524171ff5f5f4a65b33437386d622a5841b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170478 Malicious code in verify-taic-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d39c63373ebbe32787746fc06593d6be06e6f3fc99ec21eff8f35cb6d9e3dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc60c78bc5b784d538ceeab38a6958fb670069050d3d87b2be09cbb58cd4df06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169079 Malicious code in tehnah-codfd-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4290e7100a231dc0ccb9b79f935abc04d6363cd2a8591b706ab703eb4e54a8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-nasuiofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad90a24dbf8397d37b8957eab806be56cea9ecf4a2643e1aa3b733fe0ab61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150448 Malicious code in @mipta19/slv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571041fae47cb37a94f3b38228a76e1e6a9b3e46ffd0b2074b00334dd5bb5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81fd4dfe3c121949e1b061e196a2abb50a74377da27fe7291b1b7dac34008d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73bf0faf5548296e8cbeeb9a9b6db18166c9746f92777c060fea9953c8b06f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03444e927b7e2b2efab57158c4ae1050d31e11712f98b6dbd50807739d5317cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e07cd817459335d38b39c6098681c102b245a0b134bae8926cb752e9dfd468b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167828 Malicious code in teagood-sukuna71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7272ecf78a45d4930c49986c4baf91d18168f4dff114aa5a5b5b813fc5d3ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...