MAL-2025-168642 Malicious code in tealove-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdf1542e5e0afe5c49e170d9bcd5272a4d8bf44a12d34c33ad1e0557928dfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166893 Malicious code in teagood-lokika3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5402a31f43749e5a58c03435ba96cabff81c124ae24543cef3a8c8f9fc874ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155062 Malicious code in fauzi-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91105a18a52db609d99aa8b6297ae4eedeb2e65a97818f83fa0d467a7c7aafbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153002 Malicious code in avh-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bcbeb5eeac2a16e068b0de60de526fe8e3454784143027d41493cf0da8c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160514 Malicious code in miracle-dok-uikayananabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b180d6e3a2846374a6879c79d849ecb9b6443fcdfaec6668026cc4ea9a663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169285 Malicious code in trevora-cir86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5541255bc73f90fc43cccc57335d2a31f3ff22f796c5d16ba09839492d6051f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168275 Malicious code in tealove-darknest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18002fb11db29f447864237226cc39847b3ac9ddffaac14b3ab6317afd4bdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/isog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5831d5d27c6fa2d03857dd3762ff796160fa57a5a41ef550d0280b77643af36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bafc27ab61c9940d3e44f97aca7647140896a4cb9b3e52d75dbe01010b157c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-bunian-junio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca23720e68120082b88b6be5607186bb72d6d57ec699bdd32ef16449e951e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaaopa-muyag-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9bded51d73714b471fc72545d7eea1b1fb2cfc578baad9464549a9caa90c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-japa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12a8653843ae222b505f0c37164edc2379cdccdcf56882d54e7944a7c5c862f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a698deee5247cc4ab592d59d48c23abc4c1d5a4023f714cc001542ef19f51891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-nutdfara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c39c6024e3f61382a05a958cf7a24442f2335952b1a1a4efcc2f6ee69e60b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371ef0a90df8f8e0484eafed3ab61b66e7b795b06a43c0ed884ac4ec45b2acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157707 Malicious code in kuinsnu-lkui-kagubumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96effd6fa666ffe8db87a250a78662d0954fea2d329ea8ca986a2c628f90e66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/kaddlad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1156599d16080c5dd6e9c1cfc75c6ec0824e7c15b2282a7402628e0dc0714e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-terd-ytua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af667ddd782c19b208bb93fb0ad715ea2ec9a01b29f8c580545976e725e0601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upuasonio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242974d33d9a6b8e10634db9b520bb059abc531b36bc8efe83b6a48ab4c96731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afogffi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a5ff89755ce4c28f79db5fc6196aca8a3d1b0c27dc8e66097cbae819606d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...