MAL-2025-169850 Malicious code in uinsu-list-ptul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e5b445d931abe4418a838d61d3169bcb000c808686fc95aca82e4ab1982dd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159013 Malicious code in mahnud-futaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8073f2f0afec84e2812807efbc30c8692d232d9358fa732441e9ffff3a48a443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167965 Malicious code in teagood-yakuza10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490855c9e489f8a5c70f70c8dfb5a1d33dc9cc046c23d0a6b99de260f6f55c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163183 Malicious code in nokire-nana30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de1d930e4172b58b8aee7a8dc5efe8aad84cc2032dc324bb7addebbcd4359c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153613 Malicious code in azhar-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcb3ce664487c8a9914e358facc756e057619d52d336eec911534d5b8e35881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150320 Malicious code in @mipta1/yisas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f214e16b3644a331989dc5930d73d71613641af3e149d7158871c4f32215e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165231 Malicious code in ronaldowati-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc65192f70eb03390aaa2274cfc3d17d0ecf529bcb2863fec19b9ff930b8695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155906 Malicious code in ican-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed1992ff41213ad63b856306289da75b4aae10905cdfe53416ad3de3717af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158238 Malicious code in lintang-tea75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f442319cd9f3bc3243579b6789d4a624e35751abb8cd1383dbf7ae9dda7b4e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisisula-pafi-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a3ab8c3c2a76ed9f7cb76f41bc01fb018ca916a61ba039bb85980ed51081d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulikoniuta-igugukafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0584a050511aad4042ddc593535781a05756509673ca5489926f3f32e8eb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gswa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51cd6bba4fbdaf095404644bccf47108c05e8f9572c207ffb7ecb515ce79306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6de13af130718f5112c0456bb876a727f74d236b86a27560c2933da2d13f859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-usutauafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a02923e3033798b202dd3ad3051c285227db628a632662962dfe59a5d62107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65fc1dabe99d8ff52bfe7a7ece3aabd505df0e9b07d1243f8ecb0e3faefaa0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-kai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998e5917bbc84c630710848c8cd66519d29fc2104f523c41bb35a501fc27375f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a3e5657f930a584288ca2908d1941fa0e57df98ae73f62bb72d339eed6c95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ca17980e0546ffd615753902d9bac863adb90f4ad069307ebd0ba052c6a906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0849837434f4d3ec2dccccabd8fba069dd80647835037d8e83bd7525f8bc5190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc15dc5f2eaa54b939cb6db5b6d7660511ebad72527392d7b531184cc2280325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...