MAL-2025-168199 Malicious code in tealove-coki41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faf30fe063422a7bd876384173c85492e1cd63d143be92d54bdf7f5572501b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151819 Malicious code in aiboa-mioloipe-agatamiaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2af38e8b4d6a2ef3a6b9e9731bcb9bf7c3f0a3883fc9bbba32d7547a964860e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158700 Malicious code in lookingan-namakita84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3595b082d2f5f1a3e02cb67e18fcc4994dbbb8290e73adc4281786d07d3ec769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155609 Malicious code in hafiz-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed20b0af7eb17320b96c13d403409e3bf8f39d9e2ab3c40f175e115e0c3d5a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150522 Malicious code in @miptaa02/asdfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55a09930038ab4902e2adad3eef5eb86ea12f08330068169f66179a487dcb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161233 Malicious code in nabila-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7510dfb20ef8c07856bf2375c08cb499eb09347eefc5b78db3d4649de8263a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152711 Malicious code in angin-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6871fb8964505144615d6422f003eff7e76376e2280aa213485eca152cac177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec01cc880b35949afa1442a6f66ed3f58987e10db755db4d36f61b54618bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cebe483017610b7933c843bf01a2868770b3650bedb7548932f16df27184394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3dcd58a237ecd93a9d34fba2fc427159ec022aa98ee7dd3e4b686c95ff06baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiguagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf9bd5395f960175b979d98c83b4d8a5fdd4e5c6c191b4f835516ae4d433f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14642d3cccb8b1bfa89557f39f36052093c55ef0dd4e48c7490e6c37b7daa0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-nur-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0057d0a67f3c6b92fb4109bad7aa684cfadf6f9ccadded2f9fb46302ae9f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35726cea28a84fc9042dce3d0ca4cc283801ed3e1220619c82b71ff82c4b2d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21275df9f55575cb5e9c72882e1bb2b0f7df5bfbab741af0ad092e26d586778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878c49f22f55a4ecf475655ca0a1dbfb236a1483f7a945b930fbe5a0ad3331ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyasfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af60e74b9dbaa2fbd7f84b436d4138a7015168628e196df1d1e3c66f514a5e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-mew-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d10c15a05281e4313d4b1b918c32953ba2daaeca4d075243356ea8dd721947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31c6ddf2651604bb770448f532f2b09ff54bee2d2d66b60d67a4a37476e2538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-namsfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5784b6d5bd408be7968da5b469981e5313982657ac955009e733343f069150d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...