MAL-2025-166880 Malicious code in teagood-lokika18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7a4d82214c9df82f6f18bd323d648700c2a9e971affb395c76acc4bbe592f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f20ed9d2b249148568fe08812b96634388df3b021f3ee2e03da0e4e407d14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e051fe555ec9cbd8225aa522f597966e602441a34185133a72ac9a036fdac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154963 Malicious code in fadila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb87a8242050f54919be9d9769ab7ae4e2bf54f2c81e22b107d29ef06e16b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-fofgaf-gaf0ahsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fde8081aed8c099a81392f0ca4dd3724d4306754bb7ac86206947045be2c1d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alao-mafadi12pafaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4300c3a4b039eeab29e11dddec5e0e99d51a161d1e767aa0ff6607aa558679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168540 Malicious code in tealove-nokire13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf17007de0f552547e486c7e92b1b7dab71fef06d002448929faaae7144928bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166848 Malicious code in teagood-cuekin8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961bdd878618c49361a59eacea15d23621cf21931adc15fbcf03f7233a94dbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobgilai-januqgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58925174bb18f4192ee7e2fb3f1b8c76b556af12a078214b98ba909a753832eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155430 Malicious code in guras-nutra-dasssaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8344f3a0ba2bab95862b6a7dc987925dcf466fa77e16cd6f0091a0a8942335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161708 Malicious code in nabuf-otomin-nosuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9444bfcb11a4b1e462c58b37487dcebf1b3de3e4f3a0bc4694e3518e32a53b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e765e4f8758b7bdc945a4bb4471d82e5cf8266e9e7c4b1f7f8a3dfc64ee71c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ea496485bae15508e0d8dd27463105bdcc1cdd854c015239de98e5c1def458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28c14e60d33bf5c6290e506df829b042365a9e97d809f8d78028f997d04cfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabubai-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263f351590a96f53504c7ced9303e6e3d5a920c371bf067905f56b1b60de76e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160422 Malicious code in milaoa-duio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1968ab37cd5bba579758d56cda8a2a10e9ce2b95e61034f9234761b8f417f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160935 Malicious code in munir-terd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b8a40f540a52f0b2817f90f167587e47eb21364dfbcd4a5ba4c6dc51d92621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165209 Malicious code in riyanto-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5b364c41e0d91cec4513f907224b39b0cdf907f2203a95b12d26a5dc831ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155362 Malicious code in guras-adst-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4243bfd356451ca205a5d3c991e159e2f091c58f66e18795b643347275ac927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otiganaif-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748aec014872b06ea8fc7ce987f6f83b54ce346b10a371d607fcedd8e756ee47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...