MAL-2025-156704 Malicious code in inufgi-gotumafa-anfoaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7388aca7a3d775a4e7974463823ba12999f591dee857b5899619d03377aedc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153636 Malicious code in azhar-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2d1bb9f0431e73f15fd359809e143ba2d473312d3ae53d0cc435e92bfca74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152212 Malicious code in alfiansyah-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96999eb79abb43c51922173f055cac4626b2741eb720bf0202c427ea6fb2a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156502 Malicious code in infi-gafobi-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91d36a366ab2efd4616dedbd3d43a009df0e21bdf6eda905ce7c01e8af2caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c97818d83a489ed7b4e65aca7ecc9317b5900eb8dee40f2c1c0aa3350ff7f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-amiataamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe612066c87d3567f539ec20bccb49f10ef0a5e3e828b18943d32017c8cf799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-tecnls-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd8d3dc28167185130214123feebf34ab5dde10ae4407ea3108f852c88d1fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80e85a42fa52629730bcdfa4537a368ed5d950f02312cd8fd149d63bf312f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madasalhiakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb8ad0b385fa35966d554245c683928d6906ce59105a2c726f334754d966f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d461cca28e1ec3952f667ae583abf24c2bca14411439ed98a189a4c20dea78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-nursese-masanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026356277e389610a83662df5bed9417dc3046f503aaf4a7dfddcd1c6e5122f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3748433f2a80450f9ca7c07836a291a00d022b55366bcf7f990cd345887abb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d382396a77d197ed55302fa4fe993cf5c5861663a0235ee522b651f34ddd3866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac1b8acc7446775280b6c337a4b1ba0bf75bc254f6d926ece5da9b5a325375c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-mide-fdtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d65e45de4bcee953a508aba2889e2ef3983897bdc2008364764733fb3e9a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168113 Malicious code in tealove-aruma9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da210d90efa282fe8160756200afd1912cd237e0a7fb0f045501ed5303605f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de70a3e659d151e11692159c4a83fac2c8d96cfa50a16b888b5a9b87ba080eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wgfdshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d98ee653edb75433aaedb3ec26ce9ed8da263982abe4b452d8eab5c01ff3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisamiaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d1cd5db7525e041b176531ce311cee88c777523617311773a1f8fca28dec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviala-madoibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d2f9411e0bc3880cd7ec26feaa22d7aaae7db93d1885e1600545b70685cac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...