MAL-2025-154136 Malicious code in dajouka-ad-rac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6531589a8ed235910ddac0717d218f5bff765349d15f33c0101677c2af22ba0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158119 Malicious code in lina-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664986ccbe2eec315fbf086e5c4e9da923a614321341ab59144e22b96d7ab65b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167257 Malicious code in teagood-nakama88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcb2ad6118fe9163d39341496266c01525f776c8b5bb03ae0bc08f5c744a5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158046 Malicious code in layla-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3905f5b551a0eec6b63052a66f7c02bf479f68d060ac4e7520e13756d0ad9426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165053 Malicious code in rival-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b010306801ebdb9db6e94a32d35f4d925582f1b2bc007c3eacdf60c0a48d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163701 Malicious code in nudela-aaaf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cf915e617fc45d0166f9d289da55dca38c478e519bd959925906341d2c39e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150209 Malicious code in @mipta1/sasdfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80171bbffb86c7d54bc909df6aa3a2ee880ca864fefbe9f27166e5fbb137d22c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161552 Malicious code in nabuf-otmbin-nuyaagfgad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6cde77c1349f2b7277570b6ec13536be0fa348644fee09866d640bb01911f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160791 Malicious code in muda-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c02b3d00cddde0ef057810e13c8cf88fbae28ef0c47d6a4d38d6ff6fb4d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomfmadi-munaigaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b258b7833907bfa9369353cabb5cda1ab8ad8edc563f826236b6d22508f3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-alifi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464ea19b5d84eb0c0b6c0fea4bbbb03f52c4fe6b5c45e041de6eaa5806f945ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d57d0081a22d3ed968be5a787f4f1ec2ee8cb971655d3110e452c4d4dd58c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2493d44d40022d63985f7ebb53b16b8093fca68719adde59aa5bdba3ba2b4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150650 Malicious code in @miptaa02/fih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dfc77cda7b37c400d96d6c4d64c771dd41ae38082f1c8a6311fcaf6e6f87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokigragne-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f0a98ce55f7a5e0476f2bee8aa563b38de0587815579e34a3ad7f2ad3176c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf40dc6a63e877c97edf56f5663c9adc12d27ff0c685b80fd838c67b9d37cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27875b75c1fc91744752e50c1db0e22971a946aca6382664294537f726e1debd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304925fe90d69d1e51c6144e55a1c0a9dcab16f95076f6b527d6dd279cd68298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-butyaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5668ccc6b69de9135a9401444c49d801082be42afff00d9f08c88500791f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-dgds-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969c958c342079f989e9df08cafb4212025ff4b1b18ebfb269b169d260a676f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...