MAL-2025-165018 Malicious code in rival-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16820e333b8941ae3eb9123610e4b6c3c03c915fb73fc87492cecda16219c027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160620 Malicious code in modirai-fuhopia-jastfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772277d51f142cf8d093e1d4b7fa3ef82cb32d191ebfdc726faf33f064f6df40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167333 Malicious code in teagood-nakamala66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f2cc0692c37f333f0b8011cb3090783838c473d9de90638c24be82d8d91a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tddx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb5ed913977384f10198da258881474f4dbcbd6d2d244d015447b37ff6f497e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e7381843e596a405cf06f91d2e2fb0a8ecd8588a45672fe0a72b10603d75c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyau-tfadiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbfcbaa5237e95fb36805155ac244a838c1e17746bfffe9ce637081c2a07916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f967f06cdfccee239a43213b23d81c6535761c33366f0b52e29bab3e1ba858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pgfa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46ded209a9d3dd8893288c4b18098b671c11be1198f1070cbc9e6c8a92147c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dxsfxfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c84f91cefc6c46c190b5d17a0972f3f9ffe21231c11e01bcf10227a5bcb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amibn-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdbdd4a5cced8c02a8b053c51878f039ee9f230004e1c2a36a958be7065da72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-namauada-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19073c86d2c21ca886aa7222e0a8b40ba1803244c36e6e9e19819d37e08f136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cb16f289e9e2730a956db82d00701b7efe9c7403c751708e2dbc3abf0744fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uikayanabbaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8f9482de1203d9f6de6c515d721a675377db68f94b90281b8825e901c87d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-iopd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999331473f4ef1df711b2a01847db11fa73eb432e9ef32a12389e7e30549f50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ef277a349a6ff1b54614e64d732614eb74a86ef76b13900c19f4c8e9024c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01918fd3b43a46b8ed2c4e229b4473c1a6b42c7f3cbecb7e6e915a512f2c9e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-mivafifdda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c880c5c007c2fe76a16ab96a4f9fa011c42c1805e7cb9efe7efa69c27c4a965d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674f6ae9388e857c3e7de41f71a34846fda3587020a991c893006c8b383653ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fb6b377659139a8d88ddcdf293c833a13c5b8235476ad1e0e89050c38bc47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa3b7f0082cc902ac72d30c19dfdb9f44dd33ad1e212e992cb3c175c309c1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...