MAL-2025-157556 Malicious code in kentung-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163aed1d076846452617420160a0232586dba57c0bcf855fca81c1b9a24bb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167723 Malicious code in teagood-namakai66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230344184f8e414cc7cecb109989c3ff76947724629aa233dc7b5be5e23d4e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163844 Malicious code in nudla-ofog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607a632ddf54b34ecb68eea529365a6cc715e2c8ad2ce45d6f2314cf1cc0fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167920 Malicious code in teagood-yakuna6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083e96709bbea2800002d2c02d2b80cac043cf76b1cf134713b9ad306713ca82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165350 Malicious code in sabua-muhay-tadum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1528c2c2b290651dbdf5ae69c45589533cee88bde8e86d890a7771f04d5652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162877 Malicious code in nokire-loklok25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ea410f1e35b9b184d0a1e54c21d89c076c3016c5d673b22e47581b46e5b253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159194 Malicious code in makan-aigoamoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abea32302e1142058593ddda550633fc6df543c04a9eb2c3b81d576d15625f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca73ff88763c251d2533f93da4dfc5aa44376ec44a5c4681626d2a269104e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55727be591444bbdf1b8f6d1fcbd7a6d4d60375f029fde78acb85bca428abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoa-iau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9acf47e729b95d446b3c9da984fec359a886ba73e85b2ff80f93c1b848ada49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tayic-iamsunasiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9e162f9407023789b23cd1f5e8c525e95932485f297672a2c04bf22782c7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-ezrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23de924352d67834c7e9becafc5cce4dbc53ba192fc68c9b1b46d31ff96220d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutsr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd596fd3da9d27f02b293db67b4253631eafdeb8edd106bc8b0b42fdfcc2d8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igafo-jagaigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817621ce0dc55ce92fe3840371140206865ac5f0d6ccae95683db725b8efc9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nakio-upsidaaiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c52128295a37fc5e207b93b0ce4e2007d36069aa9a93896b728b5daa1434ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160533 Malicious code in miracle-doki-unisakiaobaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc37aef52db683ab8e2504f1ae741bc7530180b87002bd5ec8d71fb96b81f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168605 Malicious code in tealove-okta28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eb2cfa9b12d9ca995a7b48a188aa8c5acba9483dd8fbab6ac97c4fbe622984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150362 Malicious code in @mipta19/g.enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342d7e430c6f684ed22eb517116b3b2bc2978612f856e3619fab242c146b8935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...