MAL-2025-160358 Malicious code in messi-tudassd-usidhfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6341cb83ed69395cfea90bd02a8d4e34876190c8c86d016c94a47f5342944668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-kilm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e663a5529ee7754ed49cdee8166c277659fb9d24994de26aebee13324188f56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154338 Malicious code in dia-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f081bfff41ccf89ee951fafe636555c3e86c6c719cf6ace4ed90c41564145822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adeee0c7bc9215d63ee606fcf4b01e3819fc506a56f326176c2c53792d51e258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f699ea88fefddd808ed03e13253650a02e62d4774fe093431039a640854fd815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158150 Malicious code in lina-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abf74803326fedb4c1484554d9cbe73e4ad01525bad4ed3abfb00270b1516c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163595 Malicious code in nokire-zenitsu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea2ce0aa0e345e521dbcef9047d946bfbb930294f8f3cb08ebe4bb620637d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168383 Malicious code in tealove-naiman44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd8ac2319946edcf3eff5a5c3cdec2b426fa3340a41c8fff730407399cbd3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165775 Malicious code in sau-naki-up (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3429663b31fc22b9676b63549e648ac892435c2bc2f7006a7dc2930155aa2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nxya-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36db3e8a5d59977fadf1cd44dc71409cd93a007a0deba874bc6d5b9a8f10f8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152061 Malicious code in aji-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e788f00508964c9f5272d9ca90273d10efff4a1be6506c33017de0e9e044d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167496 Malicious code in teagood-nalikami91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56f9497cc3f9a83fcfefe625992d1a45819ed4b3e5b7259cea7a33464e2b9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab61f8b7225c009451f43d2c05ee580bbebfc784dceb177dc54196ae12b9c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150824 Malicious code in @miptaa02/mfgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df28af214102cf829f1bab94504cb20be5e5093371a2b85eafb1cd8dbbd4f4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b67916e139fffb73e3c8ffaa4b405b99b3b56da657df36b4e8ce3bc840498cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fde11e2e7056c2e680739f6fdbb0afe2ef92cb08d4ca5f775091d387532c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/qwadxxedda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8757d4189b61b60d06ba953d4abefe9a9e221d5ee8056ebb72b75845d663469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8f601a16cb4600da21c9275d7551369286957580ca1e449fc928947d943336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilau-akaviu-kionaliba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8564840af652b088fb819005e8bf90db3ed354d6cf48841626e91613f5cc63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159094 Malicious code in mahnud-nofty-gogiaoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df55dc89bf1c2e6fc1492c21a9f500920cde5b5a6bfa2b7c8e5fa39230a4725b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...