MAL-2025-169581 Malicious code in uarfug-mitayiuhai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4244e58b3fdaa129d12a4ed5697160ea2c103d9c4daa223b133fd200fb25289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164767 Malicious code in rinto-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd69d9df73e649b2e459edb7ea990a9c73478d2b69ec3f8ffa522ae9afd90c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0806f5fe0f5c6f35c4c73e2dc44d08e6becb943c7337c7c92b0aa779837d6628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea-osss-tepani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0167663bb1554745a62f0330ce9f8bc6c8b7e1889e1614e6193aefde0059c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauu-ofarfaqrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41074032d802a6f74fa623c8826791a37557bff20393f48dcf13be28dc8f6a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c395002bffc244ea63b08e8d551c45b08bee8a46be69c2a5813dd65c1b08f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-digfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ff2df968525f0ce0888261d4c483be536c59700c086e0b02a27ac2c0769bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aln-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5759f568637846fb05a3b8d702502aabc855ddac1101c2bede7c249fa19d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151228 Malicious code in abiba-aluai-aya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c2a3d39482f8e73ec751d51d24538272586188f779d348cec381c88221fab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed5b2e744fbab740cc611dc2076ef5892c7490d9413a61436027bbce597c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a282689fd839f988b785c9b3de7d3302c3099f8d19ddc8a92bd6d84756e019c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152324 Malicious code in alita-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6ab8ccbd2b8da25f234459dec00a9188803c71827ec37695520b25585ed611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analusia-akifalui-auniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91af1763a0a726ddf87715d28bc2e69b898dff7c8f3940ddb563b71fd4131f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimau-umio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ae5a50ce0f9cc83adf9d087df27781f18a4818405726867b6c22baafe1ade7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166957 Malicious code in teagood-lokika88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f1d2106f565815a928f3159f9e05a6151b2bf4fcc86a4d3a301711767d92bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160012 Malicious code in manuk-nai-iguna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e082b9ded7f8b73535f5586be8425b78d66980e196655dde2c41f45a61e0eb23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c46fe693b427e3c87d614e6498ee2d9654b52b722d8d5f7e50ba8d90cb578b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152094 Malicious code in aji-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d60c307a8fe29ce076ae4d74530745deb1b19ea2c8c85266c8c5e1624c7c158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cf27ef7cd49c49fbfa46939eda76ff0bd5c5a56ce68d3a622d343ea5325b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-iopd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999331473f4ef1df711b2a01847db11fa73eb432e9ef32a12389e7e30549f50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...