MAL-2025-167582 Malicious code in teagood-nalikoli29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169e48ab57ed2c35c85b74c4bf379690f156dd6976d54f7672816770b8659ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150926 Malicious code in @miptaa02/rusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0882086a89e1ff6987fc1622a860e0bbfc15eeb0e183bd90fac7a9cd6f3da216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162161 Malicious code in nokire-abimanyu47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c566fc72c232e0d2ec9c28978d734014d005a678d90ed07a6081344d90ccc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167698 Malicious code in teagood-namakai43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4355700aeebe0aa7e7cf2728666cae6f795801b750a886f09f1f226361e791c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156160 Malicious code in ilal-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546a3f393321b48642b3794cb8376aa0b4944cc53c08e062a9da1e3335ed0a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163220 Malicious code in nokire-nana64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c476caa79518fbedb5bf2a8ec527392537e0af7fb0dc860c2b6668c2d0bac130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170239 Malicious code in uyifiuza-iytadut-darina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546891f9cd922eb8e73add745e9a91a5d22365b1f0cd1ec1225b700558fa554a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmaas-adgiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baaea84afd5534008225115c1985353eb0ee69023a83a1ad4e6722c74723819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5a03adfff526b8ed4630721b9853babb2471b01655ee9fb4b5e62aaf20b017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaac02fa7694dc286458195420afc77eb7b2e0918744bda3c37c8c744ce0d1b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufai-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcba99a57075217a17ce97b2d94d88bc9aefa3e4f93fcee820d27848c094023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ksofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831028648104e2ba1ed802f61966c716d99556ed13dacd08c71535dbc395e999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb78ea8a09b2c922cb5bdc7b92e40193be19b290c5bdd626ebad1223d461176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5993d5b022fd93f21983557c73e48ae0ecce98091d5e53edeef929c98c311a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2616104a2d616322af4fc0d59d43cb03cc7122ff540b7d69e41e9e207da6c67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-luai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7156c39f881db38f4b8bbc68635c65bd62cdc1d66b7086d511d8520cd84e5470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485bce6e4c5c24c1aa06f1a096743c8a0993683191907614e851437b875707a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea502cc1c9529f9fc0ceeb9d424aa8678287eca1fad23668535b2a90836b262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofoi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39500c8596f3f141a7e7dd38e551e5f8a61eed4ab6b226f881768b41856360f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dda2bac454433130dedbec860869256e13c53a700c798976c0a1c11edb3c487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...