MAL-2025-168064 Malicious code in tealove-aruma10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7f3903939235c461950d91de9381eb0f7defc9ce227e11a8d8b0e2fde0bd97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166696 Malicious code in tea-oss-mirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f31505d055428a0a5643fc7e4b771112fd0ef022c9ba9dc2529c6e06dcb4f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151053 Malicious code in @oppo25/teanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb71f121e863eff573f53cefccff448ce09432c675c576d71b7ccce08e11fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152960 Malicious code in astia-alaki-malfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b9827d27d58e1011b1d1fa018b35438f5086db6364d20ea583ed5dfd37a65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164092 Malicious code in pilau-akavilu-kionupalabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f93e4f5c09b23b5a16b8ecedc4f6b56580a41f72b381809ee6005ca61ecfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banibaulikami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94527388e6b84571efae63fc64cc8fff8f554d437982eeb04c8d100dc25bf390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133789452965c12641ff541954b119645f3f1593543ccd9fe66940792c6c68b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-na-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d90d8d744bdd2d7e594186ea78fc7de1f9e806debc528fda1052d85755914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-rolsae-nutayadda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c0b7afad5bc4350909e03a737508fc7a8b3ea18ef38abfa1515e85d9cd4b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fd55ef6f15cafc92563f91fb7d12e01fb91b313688e89fb3613cc81ad3f0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a9d390d4257d3998e1a004dae0d5acff90732b9ff055cca0e570e510d21017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161594 Malicious code in nabuf-otoiman-igioamaiaao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51be021a64051ef19db7c5a6a96eae98a64f39db9e323e7db128c9a578ae756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155003 Malicious code in fatidra-faradda-nuydua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa3c1c1536ba40bd111240397df6a2cc9bf82f3263adda888896f3941ccbe7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otabaumai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06f75838aaa65619605523d432178eaaffa318ffe594f801fbc531bd6c49e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248069a33f2b9a94c36806bb3af9d827a52db1fadbea6fb3153190f27f9fd708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusta-buaibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b30574e894c2a07a67c4bdebad59987a7dcd475c9335c4c8fbea17dc4cb6f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakdre-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a94a25dba8db6b463c34d812cec5c5be8c38ade1cac6b99fb05a07d52b4ff6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e537cfba2a7c2395e256814d776984a7fbfe40057ef9a8c9a3864099b05bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae6b71ab1249173e1d8b9140d0c3ad4eec75178ddda6b3c9b6550267ca04936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasismem-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2389382313e502ecc8c7c3aca75728cc6b4b5602bf2af452979e3a24cd33d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...