MAL-2025-168232 Malicious code in tealove-dana26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870da3e28f84bf51a5af27c4957cadc371f3fc1d2487c64cb5d6627335f224e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160697 Malicious code in modirai-igno-jnagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5173291726a2162d078edee8bd31166c98c1d474f4106438f7d495011b191383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169218 Malicious code in trevora-cir25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea7341fc30f85f70ba33f58de39ba868b7fe5e64a20ed85b1becef1d74be29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165530 Malicious code in sabudaaopa-muyua-bafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0df5d9d44258b3a54046f865bf46c41becc680fad6bcb4b81e5e30a78755930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162566 Malicious code in nokire-genji74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf4d9f2e4bbada27a18e7147e5652af7ffbefae9fec52846a5c55c4a84896d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-intfsi-adutfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabb04e2c739d7a97cb9a91572859c9d03f46f65d775b090094747ca562cff6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vinakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2602301852f9a67b982a759505d7f9055825ff2bb25ce6d2928e60687126ba9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alonbio-tolamaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe01a691f4198108c941fa57ac5a7ecd0d14c15a839e4184c4548ff11ea5892e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soroiaddi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8ad061fac3cf7a95e6a70511364f6075f941c3d5541c8d6bb766344d0096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154119 Malicious code in cinta-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9276cacfc714e93f443945a7a137722671d71c26b6e26cf7ea040686638f86ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154160 Malicious code in dajouka-dsta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a583f395a97ac471328357c6e595406f8c562b7de5eefae83317339e8aa78e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dicassx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b685cc49c5e3b5ebbfd72bd986ea4c81ac6d180c2da090c250f759c25ae749a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164249 Malicious code in piluka-kamai-bicuibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfa5d177107ce1d9989311a23567d22414ad012e51b621b995a46af9f457e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otabaumai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06f75838aaa65619605523d432178eaaffa318ffe594f801fbc531bd6c49e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248069a33f2b9a94c36806bb3af9d827a52db1fadbea6fb3153190f27f9fd708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusta-buaibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b30574e894c2a07a67c4bdebad59987a7dcd475c9335c4c8fbea17dc4cb6f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakdre-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a94a25dba8db6b463c34d812cec5c5be8c38ade1cac6b99fb05a07d52b4ff6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e537cfba2a7c2395e256814d776984a7fbfe40057ef9a8c9a3864099b05bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae6b71ab1249173e1d8b9140d0c3ad4eec75178ddda6b3c9b6550267ca04936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasismem-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2389382313e502ecc8c7c3aca75728cc6b4b5602bf2af452979e3a24cd33d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...