MAL-2025-153511 Malicious code in avomainah-fragis-ogudfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d264e863f1b881eb21a13237c30ed277585278ddc7f8652bed3edd6047d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150044 Malicious code in @mipta1/hisdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c164edc6da0adc7cc7b69bb393af1a74d907ca7fa73eb6bd000b587c9ccb03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168717 Malicious code in tealove-reborn40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f414137e3bf9b6e24700c92c51eac8d9c6f26fc8f42c4ad947b2267518d5091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanukakaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c16028a71587dd0bc32828d981fdf5bb23ba2975a55cfcdd37b76471e21967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udilsk-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168646cec68e0fe98a04c853c72e32ef7e471e1e3f811160bc5fa57a212258f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c24e8bf05af404ee5b8617f9fff997d51745bf645ec383a1754b01f0cde6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3115b70ec5961b791a4873a9e7fc7c446799217efb59713ce076694c9b8506d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921eafc1ce0c0ee928c88e71feb06bc2bd601245ff8c2be454366439ce1bb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2de6644501a4a56daed0cffe3fb8181a808238edb05fa6e1eac866e2b3f2a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbb239d2346728221a7c342c3b3ba86b6c026da983e95622b7db90cc1db2a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcf57026c8819f69df99b8325d82c7cc40db1d3902ffbe72c1395e79930ce92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c86b6fa36844432201fba1efc79c4a21a706a3e52b509cc2b2e004b014714d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152774 Malicious code in arif-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9b57bd5b0ac20ca96e3b7643e87ef779f534375680354f84c02c4d2bc81d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164815 Malicious code in rinto-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3c8e2215352191fbd61763bec1d681e5908a9329e8aef56d513a3e2f0b7881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163563 Malicious code in nokire-zabuza70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d613a5a8a5bea8bf6b43d6240d6242273c19fd66b15246d4401a45ffbb23cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169949 Malicious code in uinsu-lost-diunsuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b2a4c4ee2be6bf2cc7668b28ab5f1147a618693b8ceff7685929c2b3fdf531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169679 Malicious code in ucok-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d6a5cf152806eb296592547332aeeac4b2edaa17e4c2abf0a281758eff4c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155561 Malicious code in gurs-uysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4edb27655303f8b6822c94887e06691478c2347169d1b7a1a772a87692ca398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160533 Malicious code in miracle-doki-unisakiaobaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc37aef52db683ab8e2504f1ae741bc7530180b87002bd5ec8d71fb96b81f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150375 Malicious code in @mipta19/gphsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993dae819305103ff8541b400c94e4f1854696019b1dcfd91342a37842bfc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...