MAL-2025-151477 Malicious code in abiuba-avimungi-agatoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7895b49400c01b2034bb65ccef3d0667d4709e5fcf53797ac9917538552083b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166284 Malicious code in sunden-diak-nuliknn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f207dffffb3443ce7c1212b47530161d812258e4ed936db0c8542f88acee7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153547 Malicious code in avomainah-frasu-ofru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a230c0ee64f5687aff6f520124e2170425e74ec30785be2713bc4ebf0e051e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154804 Malicious code in ewa-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56595dd9d5263c6335ddaa31a76538f3819d4f5b84cdc25ba80ebbb08deab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9762e20561cd44fbe2ad8b4b83525f9e3a58ce5cb9e67d8e45a16a2789317fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5035bc4d86ce7cf833f7cffcc1f2fddf8136389932c2badc37dd13e5c32090e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cdcb70810e767d8f2eaa6aaf77d1ac5f5b292a2916a2fe9afaa9f69ed27e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakaogdfrae-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f949d999735e8fc057711c2ffc943464d80276c1c0293772ad33987f01a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apamumpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511dd511ec27f0d1e2882ea6ccf5e1b8922813793a2794e2f8ef3516b9fcb649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106b59ed9386319739b76fcaa2c70b44e83fd357b90725849b117e99457edd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560b972ae8c610e02be75a23ab46f8741e21a0aacbb9ca97960e9434e8220e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nulamakuian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57767814c252ff47911a4698683ca5467c135b53b9e5c93320de9b08872177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vaklikau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d53230477e9fdd7c6d1b9c00b5671c8b6af80d95ebf8656afc4ad8407eb9b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca887de7cb2d5b8f3f5972e2631f8c862baad82eacf88a887f6cac0bc03f5369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114b8c1a95e2462e0fd3f8f976c4472374c58a1e0c9e4bc32f7fc52f6a12ad82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36798237e88cb9e18986de6280c3ee68ce1ccb8f2abe8ee0576ba86b3250e93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nanauayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb33900e40fe8c5ff1ccd49b176cbe7cd68defe26e50e25b35ef3fa6c270ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3f6f70bf9f6e04db62bee5b1565cfe8370361fce4d1e220cd0c4d81ed27715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d19a9dee706abf8b51411fc8b0382caef85dce03374a57eed0b0fe37bc5294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...