MAL-2025-158296 Malicious code in lookingan-konami36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851db2c175dea06e274bc474db16da8f20a2e59de2cb43d7ed5373eda1ff6c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161598 Malicious code in nabuf-otoimban-iag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4ad5d050c0e84f231933138a0f6315fa0516e6d242e631cb5280cb4c13fac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168495 Malicious code in tealove-nice18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac496254153fac2afd34c7bddc4a37a4fdf0c5e6f45c01d46d5664fb57a631b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156502 Malicious code in infi-gafobi-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91d36a366ab2efd4616dedbd3d43a009df0e21bdf6eda905ce7c01e8af2caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160182 Malicious code in masauan-ofa-batovuila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5fbc712c4eea7e4f5c1782babc963680361e250beda10ad81bf048298c92b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1b6a156b7464f54be33ec2c0626b673f2a8d042f9638e46ffbb1380e6aff86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150113 Malicious code in @mipta1/lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910100d435909122e3da6a66bc1ff91e3b18d86511984aa28acd8668ac7a0628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151994 Malicious code in aibuna-mobiuple-amzaiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b4f575ea42c4b1e6b683422e0d5a46fa4a0a39baae1441751340e1caa86bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76be09a83f4992ad450fcaa800fdc80f738d765298c93ea245818c1a1c1afb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170267 Malicious code in verify-aikn-misualaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f51d22c651efdc40d65c7717a064c7773f09b4742b510fa2f688c40523f71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150829 Malicious code in @miptaa02/mifas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983837a58f4fd9aac1d948c3588b577cee7a74ac4761a6dc0dd4d76f9d7084fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8908d912937b35a7b5a7add43fc9756f4878d1c65747576f8190d795c4d2d5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156851 Malicious code in iqbal-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a13731410855d64d684659d96441699e6bc02846d8405bab3e3ca95871d68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167483 Malicious code in teagood-nalikami8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80b4b01e646844ee9c2ea4edc811509a6b9d101f3cfe54fc1ff92b0079f088f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157589 Malicious code in keyla-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e45bbfbe514e13899b0caee53a428a613c3524ef86d02bcd2345f35a50eaeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157556 Malicious code in kentung-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163aed1d076846452617420160a0232586dba57c0bcf855fca81c1b9a24bb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168039 Malicious code in teagood-yakuza78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d38b5d0dead782ccf44819b33dcbf2ca90b70f2a29fdbb153aecc8047a8b489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9890f3d4b656c15ec7a2efbf126ed1cb4d5b71eb3d7cf802e1f0ed2d615b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156838 Malicious code in iqbal-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe3c4633a7bd3bf09835100f371751030652b639635ae3a4f6c30619b2fa8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...