MAL-2025-168446 Malicious code in tealove-nanami18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d1347ddd7e910aad31f63d3ac595afe39f0425e962e85cd06514278cf13e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166659 Malicious code in tadasdhi-dfds-tesru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608fc6bbfb990621ccb3cf9d27e5dd3d451a010510a4b4b37fea2153f45b0db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152311 Malicious code in alfiansyah-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c310a3262bf96f6db34eeacd45ea5ad4ce1c6831713f89c34239d8d931a907e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39af6cb26ef2c40fbc1c849a06bf78397f13a53e24e02ec7f3aa4d6692b7293b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163614 Malicious code in nokire-zenitsu27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fab5270db1a10f0ede6cfb429011718af5d2af8fa744bf22b78a8813a076e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e2db58be6edc7d316f263effa2c1109411b50f494819995fb9912c6a3b65b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d591f0fa6c337eac285f09523e5019907f9ea0c171be3d1e91fefb4fd70a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d9f7bbe6f932dbc085985cb5e7bd68b95cebc35e747881d539cb15879b1a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7fa65d7000f250adadcfb6f8710cb082c44bfcc27803299efd6da3a3b492b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c0a1cf0b0cb6c7dba6fe7d1a99ba583d9a607efe2040e126b0c90edbc6ca5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anabnazai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add0f69510dd4798da03a1a8fb5e4d2a12732465181b8434df44c8975c77c714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0232b97b3b8ceb50c97a5685407d13cbdab148e5b2bb0c4f4fe6a3b7a2b61462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9c22ff81e77e698805918dd5f2721f4e72b1161a228174829625792c581eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dec4bdd970a4ed0f7c2338940c1df776a7e8e5d3aa84b22337ec303f61f073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164584 Malicious code in putri-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9bbe49dc6cf5df5441ee5a9cc5f7ddf313c3056756c78ed1fc53799a144939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161069 Malicious code in musta-bata-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0cec455eed1d5918aa0e2d642967dbf0c24d0ee25dda5b2f4bc3cd6c2f6d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musik-dai-buys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2015da52b74720e089a6d542d312d5a550a556464f4b5135a646e858ce4c5a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-auruta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e611d0ac53951915d20cd1027457ab418cdd34b31b0ed7031586f8edf257e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151108 Malicious code in abeh-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8154041888defa36a6267dd199b1c0e0bdecfefd6438b62dfbd21c9e10233a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168396 Malicious code in tealove-nameka15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4201d9afebd91335e539d47153a62f8061897ee3095c4911786ddc9dfbf7986e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...