MAL-2025-158363 Malicious code in lookingan-konami97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f2ff5376d7b6a97cf1a07f9ccd50df3690d35d92133da15af7b6d83fdccc1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161114 Malicious code in mutdaufs-mar-bustyasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d765c153a76f9f52025674dade83977fc28d2412e171c59fde163e8eaa03a646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167307 Malicious code in teagood-nakamala42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66debac7389bd48f9fcd1ff9b3d9d2106eb71e790f3d37fbe3da76be981c9c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165372 Malicious code in sabua-muhuffyu-tadamafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083bf56e7f44b52cb10080bba6d2033ebc88091ac95967a7b1ed66fa9457680b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152111 Malicious code in aji-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e869f4a7b899638ff24719c1c7cfff6b17c3045a679311c4ad950bb72cbae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161176 Malicious code in mutsrio-muiko-nutay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bc03e00fbbd55d8f2fbf2f224a86b8a36eee9ff63ccded41d6a744cb839371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163821 Malicious code in nudela-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f5136a49dbbbbebd8df3e0057e7ba94cc1ffd95e64c583e1d9d2d337cc6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156754 Malicious code in inufi-gobali-januaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73a6bc992cd9a75e7f7fb7d0bf1f7c015eeb87ad1c8bebfd8618e3e17945061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167088 Malicious code in teagood-manaki24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218518ab7be6d52d017a1e4bab2c2dde52b5cdcd8293171c9500258c2ef40828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-tadufamafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8768348ddab7eee8e8ac603e208de9a683daea21423fdeb8cdd040fb7a4dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210178330384bd2bee546371f1b464b31079aa246508f3f26ed9d966f62610a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bf2c6d080fc2908feb0a10eca865c293a1bbf927c14ad254f59362eac01f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhoupaia-jastfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad70023c45a59de62687449dbdae485498423a046471c0695d476a691502106e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sadt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8024c4fdfa57ddb89a1e1cf6da59e0fde1c6524eafc9e217411ceffc491ba538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadua-mavio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1517421a88c7888b1b9fe6d2ba25246ddf4dca0eb499a57d6043c115b7ca01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281f90aeef2f0fcd84bebd782cb2b5b782fc629098237b197933d1be95850d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puteri-min-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12699d88101a176a995f499feafc8e6074463923e5c65debe4644c241a601988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0638eae12e41420169d6576544c156da73d1ed0513d74848c5f6008ebd8ee15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/oras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e55b7cf41df2b60c003da22e479a06fecaeeebd38526d0d3f24ea8521fafb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguaafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb14b0b955ed32fd9fca05661b2927fd0a8413fcc41351ca2183447f92789f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...