MAL-2025-168033 Malicious code in teagood-yakuza72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12447435e151fe8b959cc23d89b87ca7f9772926c71d31c41f86c017e0d30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/htssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107611e4b2395a36a66c47074d5fbf3a7d4e3a35ffca6b8487ad796faed1f9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9299e68678dfe5a2523432da993504e02bf503a27761a4912238a11dfc61068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28adb2045ab3c09e58ed598d5958b27086144b09604caef6b65db307b5e3c7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165020 Malicious code in rival-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ec54c14dce5c425a195ddee454edde81c2afe1f460dd4e8e13fd7e1dd889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0bcd01c87e711e9bca57585e5a48a115dba3355a7340dfb9779b11d8c58fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150852 Malicious code in @miptaa02/msysaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28961da995365caf5b3358f4c39998386d51ca8a95d889fa83a06cb3d834955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150454 Malicious code in @mipta19/uadfd-gs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad34efa0e13727a6a4fd1fab6cf44fe4f2f1cee16e12462130653aadb480936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161460 Malicious code in nabuf-otimmn-gaopoaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd192493ecf0a6d78d4d88b3bd6a939ecc8198d889758195297d07c89f1d0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-ota-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0780c45f6044e46b6315b4ca455aa32fe4483d2b701785daf14945b1b3e01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169722 Malicious code in uinsnu-lkumi-kunamlauib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20273852e4489dcb9554f95b049a9c714c19865ce5a0bf064c12b3b8324000b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170029 Malicious code in uinsu-loti-nalasbalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98775f6b3a57c4c4fbf03c0153d3971aa19e5735d942eef6df6cc73e1411800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164105 Malicious code in pilauka-akababliu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5422a8ec4fcaa0f777d30c75f55c0682191f7c9a1249ac2ccc5b976b52c2d182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0638eae12e41420169d6576544c156da73d1ed0513d74848c5f6008ebd8ee15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166111 Malicious code in slamet-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b79ffee1a798350830767c3205bcc581c398abb2207100afec57e9c6f95ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154313 Malicious code in dia-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff1123100fa9c082f85bb48c95034eae67ab9c27c43f4cc1ca2b4f3abcb0525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/miswsads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777b46c4bb278acd057b715b762027432f9186e7970b9c7bf286da222c004bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabsi-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4dd82178a49db0d89a0e8316c4a7436d68abc267c003563cc7c5614b70c9722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/insria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b73c4ae3537ddfed7458fbb032578df3dac045dc4b94788baa3fcbe4c889d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-marimasa-dead (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9cb960edbb536d3c88e22e232070ae677866b0ca8e5d6c7a0aee87bc1f587e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...