MAL-2025-158819 Malicious code in lookingan-namalaka100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd32a872ef44628d7650dc950cacfc72cf1ec8867cc129163a38e127120e0eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae6b71ab1249173e1d8b9140d0c3ad4eec75178ddda6b3c9b6550267ca04936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff5b0497f32e08462cdbc4272f135117e1f7d78536acbc43c5f7f4d809e6603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajajuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02c2deb737a22afbf7459d910d1df6d5d5aaef337959a82c0eb78d773e00c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86290a50118f79ed730c33bc928c9333f87680ddc894b5ba1ad9284f15a7ecc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152810 Malicious code in aril-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e4a6fe4971b72ce507283f245513c18698a155570733ae10c4acfb4610d869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165157 Malicious code in riyanto-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229ebab54512e6e1397e36cb3175642185601f3637aea18c4f771f0cd03e2c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166781 Malicious code in teagood-cuekin18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916dfbdfec56f45aab3449d7972292bf38da6f019f1f13279d455349cb9c95a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156645 Malicious code in inufgi-gota-jamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0e28ecba9c195a40d22b3c149b5501807e4fba85e3222503c548ca1a278ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c24e8bf05af404ee5b8617f9fff997d51745bf645ec383a1754b01f0cde6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150467 Malicious code in @mipta19/wjgu1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9a3ad7dea920e0d9ca2e72312af752b7ab1d1456717cd9c44d888529719812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163489 Malicious code in nokire-sekiya94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12603d10ba192f8b090018541882d1a1fef18619eacd6eb2a4aa9bcd10e4d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed2aab7e0d8142bb18f90cd24df8a532c18f0601c626546abe146f3e89651e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163032 Malicious code in nokire-nakala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f33424037a846863fe6dd72c8835ae42c4139d3de081ada3f4931cd002f4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-klop-kalobaksi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90ab3ce572da7a17da97f425f4c591f97f75661530a076b2e0b001a1b02d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b631e1cf8c6dde18ad75c45f89ae06fdc14bbf9700c37f56c76a551aba80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151846 Malicious code in aiboa-moilpie-aromioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e3cc9b9fb18c34ef73d0f840d05f5b7696de7b7fb01f0208f002414599eef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobhani-ayumasnoomsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0c063c59b6e94c672076277ae242ad02a63a3062dd81a5b18da6b3f58cdec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-budafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4babb5863c70a1d6f115972e30761f31648795f1491b911c6292ad00e0c4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559f65fe9c010d59370d3afe56c331ebddd62ed1046d74a3e7ea86fc519c2dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...