MAL-2025-163046 Malicious code in nokire-nakala89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0337b0bf9d967acfaa18ee2349941ce9b9f8c43073e7fb00f87730c7778fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164092 Malicious code in pilau-akavilu-kionupalabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f93e4f5c09b23b5a16b8ecedc4f6b56580a41f72b381809ee6005ca61ecfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156360 Malicious code in inagi-vumafe-naguu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02eeb25f96397057e7dda63627ba83c29117d79d5c1d6d2e81b0dced1219ec42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4b31c18723a0ba9fcc932d21a5640c8bc152c9a44e2c4b51321b8e5c86faec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2736872fa650d791ced6877e2ff403652557c5716ccc14381a7bb8b7b102dc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyu-tadaafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8add3f0a2751b9eec2f7aed1f2943a8a70786c209f5bcf4d7fa34194b2d8054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fsd-frssdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063a90b5588cae9045c5fc00f6630c3ac8d0d595f861cbbc1d1a9dca8f28f6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656b8c1317a2b80784d2747de97edbccefc5418d0278fa0d920be397865b44ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73cd455c3806d925f0b498e34c9eb639e354339c004c8a8007ca4df99525561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f80da0a5c24f276df86efd5f5bf4dd643c17ba8e40b5b08860d0ad7a1eb979c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mizcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4c34fb9caa09e7294e7fccbc620aa48071df02a2195c8276586938fe177d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164051 Malicious code in parwo-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a614b8efb7a2526545c361c26d8a2df6afc9e4e15cc19c165adaf675a0a8989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168540 Malicious code in tealove-nokire13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf17007de0f552547e486c7e92b1b7dab71fef06d002448929faaae7144928bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151063 Malicious code in abang-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1771a00d8395cea802460df4c23754fbf7a260673133f3d950d8733e8f5f8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164275 Malicious code in pilvaika-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae20ef7de6ac31eb49bb8488a67c64d33622dea0192400af4eddc9a9854d6f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d960c87d258e85c0a39f477e9f56d5a1599109df67dcc13c1bc746f8d4c885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-amanasatadfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d17dd70dc8c5b6e15cc71c7a7a363143d27708163147b581b8cd5f8dc3e3593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulipo-lukafamaahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa931eab5577a90a9a09d7d7452a9f18552e2f1d236dfda31f461deef61f4ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd6003bf6495411bfd30f3cd1b8504d514f7033c597ed2d201a7a94280f393c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4072d7c7e1fd15e2a8e998f6a6267db5e7d384e487b0b6de58bb8057b3c5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...