MAL-2025-168688 Malicious code in tealove-reborn14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58ac5ffe675462943a74be98a4f7f24d486502dfa45ddd426111a900c73d87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156174 Malicious code in ilal-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8552befc83643492ccc61d3b7301188b6a19085a81b2cb5e927ef1302b21d523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-dsaxdga-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73b0ca88f6704ca89d34d4305a3b4e73a3f467e9fe46f126fa714f04e322902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e869f4a7b899638ff24719c1c7cfff6b17c3045a679311c4ad950bb72cbae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d5de4caaf301aa0ca9eafc1daf4746da6621409d8f22f34a6f40b81bebe023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-lbiya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40a052e64ca3bde711323bb3c5983f00ff6879661eec7b1c8f635401836e373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0e8e4151f5eaa329e61c684c7ab111aa05f745bfe02934f0ec4650de44cd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b3f071547d0a8677270f2b62bbc93baa93562d30bebb8199a569d75ccf6c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e1c25501b71e2eeef1e87aab875d4ea028ab7743c619158211dcb6dfbab0ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauasu-ofarfau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b30062d805ea15cd6bcae288120e0cc018c5a18c3f9f30bdf554e80e37aabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/argg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41556b9adb09e4c5de3dae99695ee5b5af0d5cb464b7ff547cc41cb5ba23066c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d807f70b00cd76eb796275131be1e8ebd47a0a53e1fb245c47881b00497134fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dec8434834066e4cbdf96caf87694e1157abbd933d0cf8e5743cb1e4afc722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadua-maavw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f8f2bbe900037de95c5f7d01fb908d912abafff91cbb5bd98072240f18bef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolankui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfc1b6589bbe404401609fe49ceeb87a8c9147144526bd3604e00d5617fde77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agomid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3df30140b4117e00471028eddca449599738795567e2424c1d286cbc3730b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-dafuhm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ddfe5dd87160c0ecdd329aad347c6b06fa35e4e5e49dfb503378f550c959e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda12a33492d70927b873339c4bb9552b5a7da56cf1e5c96e7bd7748ba700392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de072034367e0588cda2e26ec465c08c29867c3432054c1bfad8d91b7b967987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83fbf6fa18b449b29ec5994f69d93581c438f065af01494a5160fca572c18b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...