MAL-2025-164701 Malicious code in rino-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd862a45e486e4db00f71aa4c7c24a4a3780f5e3193437843d46a10e884b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168408 Malicious code in tealove-nameka26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dafa3baea5e8325ce4edb43e8ed928576d430739bd62ecb116cc7cc25ec3c43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ace05da76ee6137520277d1359ec38173497c04ac97a43a38e1e69b06e0c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsd-a7s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c055f5945ebfe39f3677a31590051cf058af83a13fbc4c29a8572ce1658a844f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159624 Malicious code in manda-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4500e1e683f508f01c74f0fe9148f84bb3b0aead480a3e1e6dbcf85f8e284a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168329 Malicious code in tealove-lady23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f1f5c6bd916814ebe6d49c8676f4f4918953f02d6a2ff57b84d0dc3fec5a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152649 Malicious code in andriani-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0368b4524fcdb4d298d78d38da1a9faafafb732f45843a793f083a42558c0603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156938 Malicious code in ita-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d348818a6346cf6dd0780e983e8115d2da08cf25d2e5ac98e9e3bbc35300339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152375 Malicious code in alita-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b3a5b3673e56190105951c9d7e5cd5792f17d46c41e941c3582d2973536e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170396 Malicious code in verify-ayica-amali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2085d3d2aa4816a052b7e0a4f404c367bdafdbd859ea1bcd2e89482efd10747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153657 Malicious code in billa-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dc56e7e0462f9b8d816f9fab45b6a5f4cdbc5883a99a0ea220059b78e3e0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigtga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca352f57a496b9722939e77e77a0cef1cb1ed118c28223a5b4057620281b0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159202 Malicious code in makan-aigooa-iutamafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82846f411b9c7ba4dbfa03aa511f706105aa1107c5913cf8909f123050ea3b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70433eefeeb175988b110bf60286d9fd85b99178288682860b0a25b9cee1d389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-foog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5275b6f73c9507d473e9e02326121e19a93338604cb637d7bb509310d1006483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158198 Malicious code in lintang-tea39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582213c32d39b929a886394090481a310339b0f581ba2df07d5a279edd3307a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167488 Malicious code in teagood-nalikami84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8027f47b34e00b17bac44a76c02d2debb90a816f255dcd58d7952214c3a91694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165668 Malicious code in saku-aku-iu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ef981b707d8fe5634c7bf55e7a45abb2d0be7e59892fa2f52e071c83dbd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3696e675762412d56e4f19190f1888bc14e72d0ea8a7562c36e2f7f37ca66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/paso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3eaa2fb890fcfadd69a09dd2cde3ee9768c1122ed99a7fd190c971acc071fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...