MAL-2025-167901 Malicious code in teagood-yakuna42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02145281bdbbc7eaf03fbfaed4e9cd27d05a0058f31c878b45211e59b5a7a8e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158706 Malicious code in lookingan-namakita9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a368b8ea25e91bd9af1065b4041923d5a901607cf79967033101e4693ae058f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152178 Malicious code in akanabi-aibia-babu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05da10dd4983389274f7d071f9b5834f8567e68ea76af4bcc8b1e529a298af82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150562 Malicious code in @miptaa02/denba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc357fecea85ed38951b7aa076b95aa699dc55bd6e4c57cf5e13a743e8a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151868 Malicious code in aiboa-moloipe-aggsinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd9edbeb415a2957ac7dddd9a5d3934faaff2d589cea5c3f61df360f67cd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159894 Malicious code in mansila-toaviala-madoibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d2f9411e0bc3880cd7ec26feaa22d7aaae7db93d1885e1600545b70685cac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161032 Malicious code in musik-dai-buys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2015da52b74720e089a6d542d312d5a550a556464f4b5135a646e858ce4c5a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170194 Malicious code in uyafru-tut-dutut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b560abc1b0192c1919823383240f34bca07cde3b2f025b858f6abc524dab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4ffd23fcf5189972c09c5722034864228d579ec6dd296257e179554db125a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd01fc66abb1fb29110b3a98392272f05909f5ca00a311d8c254db49feb597b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166678 Malicious code in tadashi-tssu-rene (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34120a88083bb73b5fc46fd1ab88ac2f47981251ad1df0c6f07b322d13e7715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154624 Malicious code in dian-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e767d7ee3cec539d495ce992eaa11912cde6aa32cd9d515857903ee3936ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152667 Malicious code in angin-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b91aacfe7751c6c6ef37b2b8b3e90dac0c4128fbbb161ca9211271a7088f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad61d3f4ca6c6e2d25616fd0e172ef1b14835bf583dd586fbb48cd20e6cae35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9890f3d4b656c15ec7a2efbf126ed1cb4d5b71eb3d7cf802e1f0ed2d615b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otaitu-umita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cf9ef7f06bc432f83aa52b17e9b48a91938c548587f966ae5dd05249c608fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoamaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4178dc93056e9cfe33f1cd83634290b4c19f7b708dbb07dd614404a569738bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e114586de5f2db3a0ff546f47119f254cddb78f5a57ffeb150461a687cc3341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154509 Malicious code in diago-kulpo-kaipasinbauko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b769a1b15cf774290003a7440dabb18373f8c474a1623a1aebbb06d960d6bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finish-5-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d005f0eb4fc0470848da9fb4cea7cd7a75ff88c9842a5f005967394c2c035f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...