MAL-2025-167954 Malicious code in teagood-yakuna90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019dc800520ed3a389bf8d6c8016907302ceef5e86b56b2eb4ec33edb1b43e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162053 Malicious code in nedarda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01708c1b7c3f6bd5c3f2659b25bd152e7d75bf488f2db6e6568a257e0e3c4c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92f061c539767413ded9a61fad29a92450ce55592bcbe91a612f306855f0c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nanagai-igbnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a708c06dece7de039b35c982035f40321597f4b3b7f298a0d6035d99e49451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7261f502f023328a712fdaebe35baf4dc01545004172ce2e721ac3f8cd4cb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93a63adf14663ceb1d288579e2f642f5ba4edc4921b9625fb971f00165b7c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8fe8bb376758ea2002bf6296a5694d5208abf46a62a537d233a7cf30637e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165526 Malicious code in sabudaaopa-muyag-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9bded51d73714b471fc72545d7eea1b1fb2cfc578baad9464549a9caa90c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166246 Malicious code in sunden-diak-itarukinyuia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b421830c2c3a95d2aff12ae248b60e946cb8336699fdbcf25fe059bd62e7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70cc6153ed690452e62ce90b2eb0c9b1c0539a5423a894b4b22ece7a0ad2116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/isafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6294ee378c5ac6737b27adc786c96eee83eac7a52aaa21bd0d996854d478e12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308fa127fda6fdebd723fa8102040976e6dd6e732ca10ac9ad45281668b9b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotaihmi-klmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c9088dc50614e65fed5bef8ae215765379084e7ac1b5783b1239f33931fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170025 Malicious code in uinsu-loti-nalasaubalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67a9bba69cf09545f4daedb372147aead2d2af0649a2d79d74edb3a7c4f1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155295 Malicious code in gifa-ota-uofigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daed5ef28fb11d9e25a4410df9f457b419e8d75d9d3f373cd16228cbf7d0ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156243 Malicious code in ilang-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee51500d1fa90156c900d0fe0fa03d3704e8c0752f55304911765ac10f3b4d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f86ce03a3fc7fd12f078f650d1b4ad195a9f18ee32400ba6eb47f5beb71c91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152919 Malicious code in astia-al1f-daronoaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ba89676f05311eb605b8e0c0af040ce4d01b1d4ebc098d124a307524d1be62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1374aeb62bf8d44790ef28a5ef8000dfd440dbf90298e7aad83de7901a32b9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...