MAL-2025-157414 Malicious code in kapafovgfiano-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cbff25f3c6b8cf3d57a10cd88e07cb6258d0118160e5c77e1c1f5b1eb62e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168232 Malicious code in tealove-dana26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870da3e28f84bf51a5af27c4957cadc371f3fc1d2487c64cb5d6627335f224e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170472 Malicious code in verify-taic-alusakiliabamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def577300a720458180524a1120162e41fd664809c46770d4711bdfa6ca49ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159571 Malicious code in manapf-manuta-mantaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf5997e21542bf349796f5ae2217210a3c9f7797de96cf8c4e1accba37b1f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167318 Malicious code in teagood-nakamala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc4ad325a18a1ef3d9599e1ea5bfc4f6e4213bab307f2d0770adfa96b99c54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152960 Malicious code in astia-alaki-malfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b9827d27d58e1011b1d1fa018b35438f5086db6364d20ea583ed5dfd37a65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155366 Malicious code in guras-asia-bang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a30634e2dd308ce521fefbe1c634d5e98dcacf263f42708644ee625c724a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154562 Malicious code in dian-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4985cf64ca342f23432295e158cd31aba29d4e56843ef051e1b4ecd4eef02e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163995 Malicious code in parwo-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fa560c44fd78ab2c53d6ef181f03f595bcadfd5f38fd903fc1949b548b8096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151528 Malicious code in abu-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc2b91fd0afb24007a0562b551cb31ac6acdda56deee5fcb34dcc11d7225635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166696 Malicious code in tea-oss-mirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f31505d055428a0a5643fc7e4b771112fd0ef022c9ba9dc2529c6e06dcb4f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151053 Malicious code in @oppo25/teanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb71f121e863eff573f53cefccff448ce09432c675c576d71b7ccce08e11fa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169218 Malicious code in trevora-cir25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea7341fc30f85f70ba33f58de39ba868b7fe5e64a20ed85b1becef1d74be29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164092 Malicious code in pilau-akavilu-kionupalabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f93e4f5c09b23b5a16b8ecedc4f6b56580a41f72b381809ee6005ca61ecfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160004 Malicious code in manuk-nai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4a575f19f51d48d5b204d7a3c34a9aa22b3cfc370de8340b4c1b637cb1dc3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79dcf5e6c4974abddebe417dcd7d7b2417e383b655692f817f9dab5d25c74d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tsezar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae575becc7093455eb6a2c1c2c42520f54bc9e5f73074091681aaef96fe4838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07efbad554bbee7cb8966118c993a5b20a073613f42488b60631a32f2d7c79e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4145ed5e69a2f416a92887c17ded78b2dc921fd6f837bc37f3ce068865843cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cfed3862d31ef55192873bfcaf42c8bd3fb0f142b649b5e439636f5b899e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...