Malicious code in icha-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc17afad26577670a66b700f0ff7d456051185810d9038622b6d9ae3045cff77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa771970333a616dcc0a3b6d59a32b3eb2c070ab6d414ea7c734417c4b48ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8820102e6e8873b621daf1924f0268fc5ec3436a690495f27a5c6f94f4c9cc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145413e87eb213c1719ef2c0ce3646db1f406538656778d4e95014f39fe5f874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405bbcea68677d1667581abbff1321ccf1bb6f293623f3ce72ee75f1c13fd266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdb2ae2a5627984277997fb44e20d2821797c16c87acdcc66eb899154bd740a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898525d264648b2f2eb9509a1197b843a91f8c927689960c4c39229e7bc52292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef98580c86373d4144a6de5087dbe60765175fbcdc49115a96a7c123a8d573c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce86d8d51739c31f3debd7050598b48e692365eef172fed550267e2d7252b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148935

Malicious code in teagood-yakuna20 npm...

Malicious code in billa-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff68d2aa72828dd25f7fcdec5a44fb67018193ed3384ad58589ad489759dd6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155577 Malicious code in hafiz-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea001d280aa84d4c6f904e627f8ba45948e82cb51e7f5d7c59adf09ee7506075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155576 Malicious code in hafiz-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03e993367dfe530b2874b5df44687afa445850769c4fe6b4f8bd8787ad9258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160812 Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-149840

Malicious code in teagood-lokina100 npm...

Malicious code in rita-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f298812b8fd1eadca820804d56357ba5f739476373ead16c6d38de114027b861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a235f59f127d0550d359eb5b0703ba220da51ec820bfeb5bdd0eedf62aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b61b21dd0d8533a604392eb4d33875dc30617eaa4525aeed614d02b8a27cdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b8780ad2998797b1b8da61d9a99696097a1120eedad274252c5292602adacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642de07dac424184be3333b4eb486fff6b8e3cb3e1cffa9af839ac710e0ab217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...