MAL-2025-166908 Malicious code in teagood-lokika43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede4feaf4eb756c461057c41417000cdd75a06aa5daa789831adf5e755238674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151199 Malicious code in aben-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6269bded82bfc667a68e7bd80ee94dd69b3f4f461e1e69cc8b01bbd6dd48c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150303 Malicious code in @mipta1/xfsix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9e763569d9f72b2a426a662c17c500e962d05695faaba3179b44e62641c020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157327 Malicious code in kamasada-nusata-bunjsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49a7dce45db82401786f93a934ed9125a1746374353ac9fabf84ea6fd054d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160190 Malicious code in masioaluan-ofa-batoila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80f286f5197aff2a05c763277f44e9af7fc237a56e1284f646e8c96b54fe06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157513 Malicious code in kentung-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273e681c6ecdb00aed1f8f73fd1e0e412e6fcbce747a0007e3b82bfe5864e359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167835 Malicious code in teagood-sukuna78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92abb2acdf2477542fcecf5cf2773f3891928c64459b7790e1fe9c6666c16a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4da8942bdaf7520de9c9f1bc2f9ecc48b6b9a2d89a4c8e0ac66293a527d64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tpokd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da92de720d784beb450eb1beddcdb45b394823cd5554bfc7259736c8a444cddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb5465227fdf421121f61e3f8234b9197ac9876abd78c3089b7a5ce86b44bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caabc8259a32a563fa5fda5a068824416280d55987bbf81918e00decc09ef81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anabazai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670e651c488c02e809263144e144b6f398f2acec5ef7418f4a84a9213af6ed6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab876f8b4e96e5fe8d52779845a9580ddb3deba547091ef39c77d37114e30f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nar-buntal-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c457450e0f0dd69e4020f23b341f42c8efc462b69f63e4f41e6851f84780504a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agomoidoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2600dabb9401bcea0a5af264031af8556bebf8e1cc28bf37e0012ea67939ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9db22264a09efccd0102890cf21eb664b3434ef96317c7c587363cd1ef8711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30789041c452c967ff6f4e1207759bd0c58793d8e46237464b5bbbe3ec9853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaboo-maif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad507a9509e646a438b3c62bee393dcee283c4fdccdafb32af4145298834397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luviakmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfbc6db10cb1a7bb6c15746ac7d14909f5a9cad89b322a1766f7c67aa89d356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ee7ff8b21bd7c7ee1e709e76164189ea595e586eeae5648e192ef157657be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...