MAL-2025-156579 Malicious code in intan-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65864294c8645d03ed9398661f6c020232987fdf4f2f4590975e1077cc8c98d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152054 Malicious code in aji-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25f64286b9577f6522b2dc3fb042e3d7e4842d93a80675b00c469ef2418e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152355 Malicious code in alita-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0661892697ee8c21fdc19ade90994f55f18947754a0a6cb4d43671b79784fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160441 Malicious code in milo-nitu-nastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e343460a6ba36a10c87d0a81c8ed1a7f2a7b1181ee566336205ff89f7bc5315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168371 Malicious code in tealove-naiman32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720293402a58a4aa03862d96e35703e5a0d49f3c6d13df098eb807df0b4ecbea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165811 Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162594 Malicious code in nokire-kilua1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb858f3953d31e6f1bdfb3320829aadd3b4f5b9971650f8a450068486fecf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170178 Malicious code in uyafru-tufadt-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f85bf26ca6c8c1d379b655299ab724e5eb74becabf72fec8c89d69082ff003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168630 Malicious code in tealove-okta50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b68eab6996f1d17307609c82d3d37ac3123a37ab8250b6fe7a83f88cd42d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154549 Malicious code in dian-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b47306148d682e6e0f81c61a1255d9efe63ce42091aac8ffa949dcb224fb7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7defc4f96e63f5331ffb36c524f682defbc229f7096a21db2b45267f355d262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-dsdg-dssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0686a8c58c7255712699d6bbc4431f41285192834d5f89d4ccc3b8e2bb028ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/eth-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96ad7c308b21e9557828f0db7960ef874bfbb8888a7d099aa45f88834ea1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticul-bisusnyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b81009900d49ccd39efe9d1c012b63b952d75b93ccd4a5f8a1114ca3017f4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-nsdfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb7f09786929186456774995186c7d94892ab148d9e708b0808d5204fdde9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lothi-nalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d0abf7705279b6948cde7de093b3db4bfa9943998cfc5d79faecba7b305746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74128e79a7e5ad8f37ba506ed1087599851a43b5ef544ff1bda561287943d3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2faf7845a82c4d169462ea40a24398f768284f245ac2821db7e7483d95bf6391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521f2990da97944201a2f771d1df307f174dcd4983cfc13d639f201c0e1a5298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anfoz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451e409869ee94b291f0d0a5e1e9cc14ad9a5a62aad2136421865ff16c59c69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...