MAL-2025-168014 Malicious code in teagood-yakuza55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb9e3f2ff26e7d748021d170c97adb0b2af1c3442a07a2ca1279051cd9381e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164919 Malicious code in rita-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d2fc7a61fd92faaf6737dba8cf5b04ddc28c18ba4800c061c1289772121568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168374 Malicious code in tealove-naiman35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa342a38403f6cbd3ad00dc31b262e929a31760485a16e2918cefd1c540f8bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150468 Malicious code in @mipta19/wjgub1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501ba5bc14e92d50b7173cf540cb1de0bd0db3fbd8a5466e1f26ca10bf16d3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169538 Malicious code in uaragifa-ma-sayuauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb02a9e1fe44450be8ea54d22d37b5585b48569b8a4fb083e69dd16fc987946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168609 Malicious code in tealove-okta31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd7f987a2fee759d6b1f952d72968f5087877360a823c26093b65d20ffb4fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160027 Malicious code in manurung-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78eb0971837a86711e28abf2ea0c09048a528466c059859a003ed8ecb233b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5179dac34e3616ea6c5a3731a5b54e9ab4460a81546c30465658f2e4470c8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vakuakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4865e60f811a709cf4269d5031d630476fefeffc57bdc74854960596bef22058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaus-r2ff-deff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e221bf8dc3b164f81b725ba5f8977c2d85c67f2a47aa69076e79d1d9706aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9aea65dc9c90029c165f47398167d78b5a2d06646d82b5f3b5ef7e63c25c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99c2bc10d6e56ff86a0edca2f18b53eb95224e9c286505261841b72b083e64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofoi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39500c8596f3f141a7e7dd38e551e5f8a61eed4ab6b226f881768b41856360f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfda95dece49c349bb015229e75859eba93473f4cbe3023d9d9268f8f77cdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55da5ffa5249f67f35bbf9d4ccf67ebc0bbd14bae3197994780de15161d71320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb11dc815b2147fcdbf9cd1f96032081d25be2b7e503c9fb081b0ac169ced39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bca30cad23975107d004deb3bea69df1a7851d7efdb1640bcb8f8f0f07ecef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8fa9954118e2c98adb295109704a5aa09adc972382ec450f5727c03b6d891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67fd57667f2485513743099c5f35d718228a8db29c3da1e86fefee2f23af452f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fdc447c4638176be1574bf3913f117d7fad4c6470f57100d6fe84b9face036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...