MAL-2025-164908 Malicious code in rita-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8abb09d3373fba90bab70d3a8776d3a47d5c5a25607317473bcb1d8cea98fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167629 Malicious code in teagood-nalikoli71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7582f6473470fc89b6a8e1336bbb742634bd1d8e28b1bc1bdcc245e7edc158b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/s-core-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405b2834b1267844ff7ac46ce6458822a569c0ed9203102a3b2d3705c4f9107e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156493 Malicious code in infi-gafob-jagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a9534999b7364fbd9dab4adf0b9981750e54e22da897ab9e7e4ffd4b7dafe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioybnali-lauybaasukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae87cafcc79587b8f99f1051100e4c414825fe2bdcaba5efcd0ca6086a31c7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysa-tusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487aa0b56711975b15f16b8382de878917368c377f3ca44239dd73fd14849164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160356 Malicious code in messi-tudasd-usidhfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f7744b1de28f8fc81fde1221b934777bacf8d94dab1098cffd25e83557f3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150928 Malicious code in @miptaa02/ryua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb3c22bf51dc614dfdf04656b4641306f2828ece12e3149803215936b72b1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165618 Malicious code in saku-aiaku-unusiakau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e33471080bed336abf474653af974b464fdec04c2fe79ff00018adc6763970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166383 Malicious code in sunden-udilsk-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168646cec68e0fe98a04c853c72e32ef7e471e1e3f811160bc5fa57a212258f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151833 Malicious code in aiboa-moilope-aranogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b748b95441c49a3d1e999656ef1ef2df6ced277efa7150b59f2e045530d08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bbd384bfe5fb85c966796042b31fbf699566c736c1fd57d0f3437fddae21b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-wsdew-123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae93fc4fa7a1574adfd22b2c68f21095f1920f8dedf535ca5ad29bf27bd0f775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banibauiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03965efacb9fe3d087cc9ffe3f9dac7318745f6f8a3e0acd40bc230573bde9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dbb846799b5179c558dfbcc9188aefcfc4181fd55d7780caf8903601d53d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igfogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadaa2f1964a10623c61ecaa82616e303fb01bd8ab601f6d3bd0e93751e0f11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3322c8ec1665334e908c690f64a38e7da8b9824314595eee037b5cd7f373d1ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29ff7ff47be9b8ac808abf038869e55d7830b6425e6627f7902c39924c04068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28e204b5a710c5c411f009fc0172c09b397289e8cdac8d3fa0bf150f9f7f95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgiaanggapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20667d2f5e0efd514d3285d4ce86b985bd703b5c5c38cf474c40ae6a595227ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...