MAL-2025-167201 Malicious code in teagood-nakama37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d468d095af8c191be0566b35a6307b8774fecb5ecba4e015d2e530bdd876b589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153735 Malicious code in billa-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebfea760e615bca241fe40e722fe988405acbc72a40e46904325689dc3fdb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15254705bdfd7aa3a9edf63cd8a51c2b254033e8867a31d418cd87092204a8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihmi-klsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5cd24748ef6189538d9c38a32f6464456407fe4a243d99ec264c6af113bd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e34531fbccc9091852d6baca12941a77dc2d14deb005b3dafb54198a5f4965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butarsui-mutfru-mutyoaoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bd7d73f230d7a6b2974a1607b5c13f61d741dfdb6df51936446db0db5efedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urat-efduds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a552989ba234c0468f1c913c3a8af29cd14dd1c3455c2a002cda69c32848cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f659955f444df90be1d20bd91132379daddc1c59b1c9f97b5a6e6d1ec6973e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578c3f8ae8469790cca5d2bb4b4eb2816ba99e2bcc3a7a2d0034352c4c7a191e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b744e98b5bc12987f23bf1614a4aae54587c4201f57247df782b8af5036cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-butfsdya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97fab9d80fa7e561fb4a7b8acafc583483e92a8f26c98aad5c1f694236c9f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd302e84318f8a43afc8e79faaf8cdb96e1ab0aaaaf40464a0aba33dece8de03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d640f904cfc9de62723c30e31a91a7528d07c1b9c55ff24cebcfc3f7c840954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5dcca1861df3587223f8cf7acb262f7ebeb2b276aef558f633478be8312564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-biula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0fbf1b0ea5f3ef86566671a7850e5a307406c7621e05efea23622f3c55db56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167187 Malicious code in teagood-nakama23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6de13af130718f5112c0456bb876a727f74d236b86a27560c2933da2d13f859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158420 Malicious code in lookingan-nalako12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f65d433866b50f122dad06dd4bfa70cb9277655a6cd06a93326e9d95e254a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168447 Malicious code in tealove-nanami19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476a8f6f912f664bbb8b08b2f5b9da8b0032b75bfa0ea1e78df062e32f6fee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156273 Malicious code in ilop-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8e30c41cc7718e3449348d4898e4a98de50b7eb98ab2e1e74ba8b8c7317179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163296 Malicious code in nokire-rara100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b98e1a30b683cbf4e5bc371a4f4d0b86654c1e86afdb0b53a0d9962671c4d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...