MAL-2025-167254 Malicious code in teagood-nakama85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b793ebde30eb93b9f7f4ab86b44238828df653911f5cf21a570136ed0c1ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150024 Malicious code in @mipta1/ffusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7745fb5eb50bff7864242cfa52583b92a356d95b4e6aa78937f77c0d11fdd9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156174 Malicious code in ilal-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8552befc83643492ccc61d3b7301188b6a19085a81b2cb5e927ef1302b21d523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163797 Malicious code in nudela-ofgaf-gafjhsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab039581100156c0107ed04ee2fa17a9a89e12cb04c6d18f90a94b65fd40b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164242 Malicious code in piluka-kaialbu-nuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5491c51fda05dbd52b80aeab8710bc8dd160cac1f3b329a0e106dee4a72a2196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150416 Malicious code in @mipta19/ryie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd40f87bca3ff66e05439ee7721dcdfebc9c17be37aed30e54f9f737008cb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156357 Malicious code in inagi-vumafe-nafus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c6542ae112ce385c3946f1ece1d1c51727c8d3eab715bb4ebb497cee6c7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168833 Malicious code in technical-ain-ituil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e850f328802a0e7e71e7920a7167868c19af8f2342e398cfe6a0cf09eb7f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153625 Malicious code in azhar-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5426bf419487a37217674eda63e60620d29c4bd8e1d9119aff97316c65a1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153865 Malicious code in bitha-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e1be09d75b2e52b4912002fac218df63660fc8c0fb341fdfa37334c8031a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156707 Malicious code in inufgi-gotumafa-anfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67d0c604ce2c7beaf53d1d9b333e74014d3fbf21da013058653d7d43ce8b25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169300 Malicious code in trevora-cisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c786bf399fde2a23d53fa81342e322dabb5aca9410e7b2cbff43719cd7ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157200 Malicious code in jurss-gssad-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3055e93838fbe7bb2d80f62c4fbc24a4ee028fdb3f808d44aea93c92f69d4e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151213 Malicious code in abi-alaufi-ayavauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea28c341c2f5d406c4238b693df8660a0ecad0289b031852ab13263cd311282e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159993 Malicious code in manuffak-angabofi-gunal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90cb01f5c83ec4228c06d734f3071c0962a257f24e2fe3018dff13e80fd5516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164830 Malicious code in rinto-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f824976e4d53e3beae7d64049b06647afd7b9bcaa4386583303ce4083fcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ersisus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c95f24e1ebc2262be2083b7ba6b758ada6c9c312157c197437f9c5c8fbdabfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7982c350ef140ce70321ae834efce710ffb29a2888062f653aa8aa18048525c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7cc6d6aa9f89e1660db6bc067344e8032b577e8ae5ba94e929db47e75b79ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a83618eb5b9bd4388f93cfdd61cb370f752b7cecc269858c06298c9156d04c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...