MAL-2025-166336 Malicious code in sunden-dibuok-inumalikinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbf53be41c3c97edb99d872692decc3bb2672669568e74eb3bf0e957292088a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156163 Malicious code in ilal-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a044b986abb447c5088d6da7b175b7a9c6a1895be8bbb057d7c8ccae0f3940e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168620 Malicious code in tealove-okta41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6abda74ef64280109f74d2c6097fb7a39a8c4602d107ac870c167648f79226a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155692 Malicious code in hariyono-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c188ac62d82c2cc91adc3a1efdde80d8aab97bf5ca39abfff08ee6eba35aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bffb76c2e27185edac1c703757cada8d8652d8a14b28e6de8a13e8669185806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-biunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4569fdc08bd40fe79f89b61e7b22fff126db8646f0fe48dc82da041eadefb2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mrra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595fb9d0e41a0071a160d157cdca1a0a065c0e862f977eaa48aec646dc040979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilau-akalu-kinpalaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2c637937e920c3f82d6183c58d3854346642e66f10fc2f6808c54d20242c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d41382c6f1312159481822f93a11ac7a12fe492d133f34ee60fab8e8400685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1659eb84d1700eb3b69621bd94eaeb11aff646cabdf6bb33bb02c1e64ce5648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-dsspdas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf372b5527de17d387bc83c7ce8a4415dba82e9fdcb4b278acfbdf94f50d62b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eecf14861bd81567ca4920d90ebd666dd68193b8828c509c82b9a53ce66da2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ac5c9f005c4a7483b1d45a368acc14bb34b1bc01a50a8941d2c777e4471207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647449e5010eea28023eefd6194050fb3885cfe8d350d59ccc2a8b9f76ff0a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-ups012uszgxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b590d233e675a1c73a9bc8e538e7b6674f8d39a3d7f94c36e2924b3aec56bf94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-riski (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa8225f61e83db17f0aef997bfbd592c3eedc50420b6fd7608826c777321f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf23f08b7b0b5ed8ce46e9c4414175b0efe91db9d9d49fe0a61f0438af0896a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865d9808951cf8eb88739265e89493b2f8c89c8606e0f86b0d973aa56d9fb12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-kaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22240ca8093afe6e199466068461bf6a7d9600a3fd4da2e0b43d32adde96224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dulaiklbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165bd759a83a71aeba3fd2cd83fb2b7575918b34a7f5d996dedd5ebac50ae8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...