MAL-2025-163079 Malicious code in nokire-namiresan28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ca0327ddba3fb52eeea4b0cf810a34ce4c5bd171f20348268d7219b0be471d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169288 Malicious code in trevora-cir89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f5f3abb5a14b9e59260450a30bfcea214e676c1f643c5c862b8c6d58802e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-zas-darss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b734f0fb21659cacd5b4d5e67091cd4672691bd1adf017702bafbc22366f55d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d14ba4b3e1bdab0e15e5e6a86ec44be87f24ad7d83235d33629dba81f92f1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f1390bb10883d2a54ddb7447f4e64b025aad9b4e390a08661046c57b56efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3273026c79f9631c3639efd29aa3f83840cce12c0418518034aa924d9252d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fogagif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab49f4d4ce40361a773f55f9bc60bae141a1bb2b7928ba10424086bfe11e4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fmyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace67af00f482a5d9377a9703dd6e29de090eb46f62df7a427339e102a7e4257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90524f1a7811b86e041e73395f7d844803f1834e21080f379f9392b2c83a4434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-figaayofomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ef44ef0b8f6d17fade1d906d4ad957bf1d3e7df9b341cf74e0a0ae69853385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aku-iu14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3077e64f12c6a0e5d638ab28207225874a4bce637b63bab2101a1bd660bb9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-hzsips-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b67036adf200654034c0a758009b5c96fbf3843ce242c350791146b6706435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167788 Malicious code in teagood-sukuna35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809bedf5782112fc8e316f679c9b3528d3453ee1c359e89929ef767eb630eb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694e319e8a412c8e9d1d5092ff380b2f08c76ec009457a4e30f224f687e610da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167562 Malicious code in teagood-nalikoli150 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4a105276db4d57b063c515af72d407f78ceb44a6f143b5ebb71bf926feab3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166010 Malicious code in slamet-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bcbf2a4da36a6044a180266de0e634a410f97f09a54df0a34ba6f3b7f3604e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0af3e0669a7f930e270b69f4af0621c8e3e309816b6e512e523c119cb48c80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59bd6bb2b3aa6186d6affc401b7b2314692c304e39f47b2dd0aafbd368343f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163540 Malicious code in nokire-zabuza5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f7b38f1427e20b32d5bb3d751617ae86a4aff8bdaf4277a6b285091ffd4fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168846 Malicious code in technical-albiko-tin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608cc5a9f05227bfff30cbd34afd9d80737d1a499c286aa882615ee8ac0d0546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...