MAL-2025-161438 Malicious code in nabuf-otiganaigf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e555aa4de351945119f690ba73888c92b3908c89088f89c312136c4b24fc7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159318 Malicious code in manadi-scaisor-dari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f5a2c586ffa7d810279748cac586e0e46897fbe571d143d4a32237fd610745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151035 Malicious code in @miptaa02/wqdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba41c27cb4542fa058283ba84363723f7a57cc6c80a7be1426b3d1419702061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164343 Malicious code in poli-aki-alub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1e04e8f8427b9c3f3e9ad63c55959e75c5ae2585d8a35adf6c415ce899b09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-ezrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23de924352d67834c7e9becafc5cce4dbc53ba192fc68c9b1b46d31ff96220d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19207635e48c0996f6d61ffc8732a28224cd8b39b08f44e8d0bdd184b1913336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nitroacer-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54e17b454572b46c90a67c1e12690e9be3ed719447697b8d599d26305518b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165234 Malicious code in ruji-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88209dbc9f546f304d3907deb5a544978efa2fa1afd826a15a9724200d6c55f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168802 Malicious code in tealoveness71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f817b1cc4e7df576fd5525a2ed2b01b0658d36952e15a4dc981d41ddff0c5ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91c0f3e3f1a9a3f614eadc1f2c281101c150afb9a75f298cbef921633f1b9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154961 Malicious code in fadila-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5e1adc0b91d83cd019f1e8fced30bc4eb617a065a88db4f0e4edfac62ef786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mhnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe2a5c697bdcbca1d5a2cda9fe4bfba26612659dfbcd1fadce9d3abe655c005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e611cce22e477277f5edff9f28b50559d1f89f7e736fe1ea33cb93957095b31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169578 Malicious code in uarfug-mitauhai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac676c55fc996996a1780c359e62da26f954e701efe2bd09499cc5d87ab71a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158113 Malicious code in lina-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449cb3a3486cd50f00a1edd4e5a3803f8d270664a7e864966a50fb5a08afdd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tob-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e3531e625c4a46b4f0d924906fcc2d8ef5c257bb8cba2b2419e67bef21402e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167838 Malicious code in teagood-sukuna80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af866287ac2cf9ccf2254003cb1119d674ee42ae79c8134c65326669ead4c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156960 Malicious code in ita-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c770cc4819e5987d2f0dea476a0e2abc4e2c8e59c70c51a5cc4382a1cd2495f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155353 Malicious code in griez-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4228e142582fac35900f7baa5c0e20f88451566b0d2f49ffed7b124d826c762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kil-akiualabannuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c94489da2df0b0c3942e44b539b452e32d00b2abc862fcb8393cbcd4d32d8a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...