MAL-2025-168543 Malicious code in tealove-nokire16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cffc262bdd92c895f2d0672eaefa91d3c829447b5f67297f01e8d3b8cbbae252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169635 Malicious code in ucok-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a394fd6df1164e4ccde781ab77507d9ffae21aa392374d6ec058f07ad7633ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158830 Malicious code in lookingan-namalaka20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936dd8da2e49010bf8bf616f3711203587110375d43b77c241066e7bd84fbbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163009 Malicious code in nokire-nakala55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7285b883f9be075f6b98f09f47efbca3b079d15a0c962cf693ea8deac00a16e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159530 Malicious code in manaf-marzuki-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f8a7ef33fb77b67bfd6bbd6fdbd24aee379edf0da1889ae3c58f5d13b26a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155360 Malicious code in guras-adast-asda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7134107fee8a63bbee128c1c71f46b42e874a9bc1f23f56ada0b4633911d87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167617 Malicious code in teagood-nalikoli60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d835a2439e8e760ed809bb5f85253c6f651edee67aee376bf50677e9edabe6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165586 Malicious code in saku-ai-upsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2dc2531f9fb99d8c23d5d3ac58b09fce4c6dda5900c6a41b33fb2547f603b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154674 Malicious code in dioago-kamo-alau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb387db93ec59bd4f28824c95263e57726a897f79838cb9349130ba6e84e812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157595 Malicious code in keyla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da1ee1efd3f07f4b55aeb23b12c9ce56de676d4bd86c2f77b0d0d4761d88fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156704 Malicious code in inufgi-gotumafa-anfoaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7388aca7a3d775a4e7974463823ba12999f591dee857b5899619d03377aedc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161684 Malicious code in nabuf-otomabin-nuyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3622a572a2abbc86022fb7df5e5b328d71c86bb403a0b35c643cbac94e55704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d5556fef7d03d3e965ea5faa0b4dc625c790bc89752b62240fbc0a90023e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-daffmul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4ea4e9faa2b3ba6cd8c5d87e200aed539c660ab0ff81fa96acc89797d6acb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00bc061c4ec279b9464422d552cfbb4cba100a0026e74ecc89acac95345a1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29a235f59f127d0550d359eb5b0703ba220da51ec820bfeb5bdd0eedf62aca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomin-nosu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a1c721c973064ac7376c940cea4c11ce0530b1da9ac7e4513b4f3d393cd6e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulio-luokafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263f78d68ba991998b5c9554ae1f6c9f6b1d8136bc883c5c47aba4b5c201cf1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5187ebb8018dd8c4e964433cda3b616c596dcb42b06c1d58c25fb00e05a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...