MAL-2025-162964 Malicious code in nokire-nakala13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e4484105ed21d4666df26122ba3936d8eb16758c7aa71a39afba11e4f2a7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160642 Malicious code in modirai-igiafo-jagagigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8870f0c8c9146f98f05283c1d1059ad39c81652a5ab378caf8805224ad8670d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed113a63db69cdbaf4acc7ef5386d2b1491612c16ead8c48749d9ab9f81b55b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161899 Malicious code in nasrul-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c6e05f7abd8b72ad42352ad4d5e6c4a855eaf81f0e58b958919168f6d5ce13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157852 Malicious code in kuinsu-uyilu-vinai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0d6d036377eca1092c03f504adf8ce59e62b75e5eafbb94bfeda1f75ec7c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muha-nyaianfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d434bb2a69130697c403ded2f1ba41ac1e9117a7233161e7f5e99a91c17594c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151793 Malicious code in aiboa-milipe-apmumpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4366381352d7b9f7f1e351d6efe48bfcbb33567d0592b0fad5fe4daeea90c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a99d037357f69cc58bb9d2cbec3541ea53ac082c8e1b640e4f9cab4bca744d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168491 Malicious code in tealove-nice14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c91359d00d8452be7cdb604cfa9e82156eb03e40392b6ff02bdc1f4b51a689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167976 Malicious code in teagood-yakuza2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbe5f2f77b65c783e587b1c731a934b81731933e33a0f8a915adea432d4e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159649 Malicious code in manda-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de1ca6916c71351b8324c4143e4ae2667853f8dfaaa584e01c709d9e591b96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151903 Malicious code in aiboa-molpie-aram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ea7c4ee9a1ab1b36e2847305af05603f11750f25bc70de0cdbb210bf4472ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152865 Malicious code in aril-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1bf1876229b1fb54ed171046ceefe6b8c7ba15be89e13712b6518f686076a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169784 Malicious code in uinsnu-lumi-kilbrm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca78c0802a2947cb57f1280fa043c8f927bca11e53a8e37aa14be9788c156b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161052 Malicious code in musnisdr-terd-fhgfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27561f694587a8e97423da913f6a6766064a01238d64809871eb2123ec5e889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-majdidad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dadc9a99ec88eb328243ea2243cd67bb7c0e1d5ece867337876083758c097a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150203 Malicious code in @mipta1/saraas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fd2bd38773cebedd07ca5271dfdaa2eddeca77201cb739d188d3910c05e90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-kronos-warp-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46463893d487d5780c5b22490344844b9a5e96f1b8502d896a2839501e0e8b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...