MAL-2025-157544 Malicious code in kentung-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16944b228cc21ad03f29822599ba83cb6f97ec306bf796ad086e38711d6802b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156221 Malicious code in ilang-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d5f59f8a652242cfa7b01241f48013f1905c8e7af2824641e2deaf7e857c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4657f82e2bdc28b1c435f9e56fa85d2e4513e59578d2910bb1d5bba4a3048bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162584 Malicious code in nokire-genji90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5f1ddf20856c832a6bdadd5c0aaeb9bbbcfc07aa289829ace6398b66109fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbc7baa427e0da1afd12cc3914ed675605df0bdb84d686bab189c18d8ef6421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd71abda1a4539f61164399e2a69b5ba885e654a45e58332bc509aab8fec80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a295d595070487ccdb95cd2befc439a05379bcb3bd4f535b7016f4d6259b1468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150034 Malicious code in @mipta1/gkjlk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852babbaf62ac6c93f0f9329b63d570092a815eecc8ca780e9a2e8f03fe270da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfdc6ff007cb5d9d065ac984549312b0949a0ab684d44b348c6e8972f3fc462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15ea7808169e80528933f76306d872d1f2159990731720ad99f998df8bcd891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gota-jamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0e28ecba9c195a40d22b3c149b5501807e4fba85e3222503c548ca1a278ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0458782193b91fc5895c6e722efd2a2d79d343b43bcf1a59c1076e979f118611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168204 Malicious code in tealove-coki46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1240ced41ba0e096caa75e60e9f531d837fba06deedde57e054c0ee9b2548a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152136 Malicious code in akabia-alifi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464ea19b5d84eb0c0b6c0fea4bbbb03f52c4fe6b5c45e041de6eaa5806f945ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7b8fecd187b11d2dc7fd6a3ba8d95eabbfa27a98d032ebe02df0f1e1f668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168363 Malicious code in tealove-lady9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a697f5e24a601c1ceafe793e0d2dc1727b14d2477781f56aef897d1596e2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sif-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09b1a10223f7105bc99eb8d82fca9e28afbc8b193c462f44512899ea457175f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safif-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280890ff8cb03d18639b346e96683084ff5de1238387bf8798ab7ecdbb0d2ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165215 Malicious code in ronaldowati-cir11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152a7d16734b9a5f32dd32620e900f461ef6aad96acc6ff36b247e30ab45bb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169969 Malicious code in uinsu-lot-bisamiaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d1cd5db7525e041b176531ce311cee88c777523617311773a1f8fca28dec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...