MAL-2025-167925 Malicious code in teagood-yakuna64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7493796bcdedc82af5dbfba04607b3706bd6a6328bd2ec5bb14d6e9dbbba8067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc068c81fcecbf32472bc4962dec03d3f1178f0b8822a96b36ed978fea3938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7908611f8fe804342d7507f70b24d0e882273b5a32c3914423cddcd54d690d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanuanianiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ac83c37082450532d1ac9b6bc69bab65bb744d6c9ba5634ca28280d9f93b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b8e364064233925798814715dadb5af8cc57a878693f26ef6bebb87f1c22ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163302 Malicious code in nokire-rara16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfba69bae657a49329c55cd2adbc568c411bf703f7ee5b32346a55c8eccfa5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5ca4b313ab00918b1cac3959fb7296f997e676e02c400981a3e0375edf3d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-limuikali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210cbee29feb93660c8cbba9f721f24a5560acc251b98d65442ccc34440aa7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167509 Malicious code in teagood-nalikoli101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19e15a654a4d8a38d6b3a1b273daa170fbd59e0bf1b19158dc9d4dd290cff0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7223ed49b41facff2c08e1900dcfcfb2948b5a644bc380dee9d9c73de38cf7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165648 Malicious code in saku-aiu-unian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82f343cb5a6131970dc9c147c702aad678f65e10a84976ef74b835a324f519d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e984bc862c2849f9444e570eb183ec661a9d44b5787d13ae2b065fd4310cfb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dofajguagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f39d84c4ad318132921cd4fceb1458684fcd15172b8c52f202bcd0152fc2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156083 Malicious code in icha-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97adcc0d5c03a98c1790d7ff5e147a34efe9238daed99b5b1e49abac0a6e6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 472efd8e5ebf2f535f3fdd1c68cfed6802292e11d60086eebd768617e78ef721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161573 Malicious code in nabuf-otogamafian-dopohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361061036eec53eaa54e0adc3a75c7030cf25a6c23e1fd3b870c44c639ecb7b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165788 Malicious code in sau-nakiio-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1064e4f5756187df74246aa401ce6f9d884efff7c6c10e157eafae6ab7d0cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153057 Malicious code in avminah-fagiaas-figaayofomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ef44ef0b8f6d17fade1d906d4ad957bf1d3e7df9b341cf74e0a0ae69853385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32c56537fee0d5a74b2b1abb2e79883a27f8a3931ea784e076323228f80d85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safda-muradai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426e11a121443f11d6b11035ea1b98ccb2ff6d449c67a5fada82bf6ea9f7c59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...