MAL-2025-165707 Malicious code in samehada-daazs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b253f9a928348aa31100237ed838faa418ebd7e7ab9b2b55ee0b3cf80484a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156953 Malicious code in ita-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0cff602b1b177827986149c60978b04a5e42aa7dbaa9ce5f211aae6fd774f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154402 Malicious code in diago-kamuli-luak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f09c42c12bca600d1b25d768556216192215818da13c9906647e2f3a0669dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155528 Malicious code in gurs-masako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e375f0616908f780419541428f23ec6af02a5c6c0ee4ed424f904c6dd34464f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152822 Malicious code in aril-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd9d1e0265cb119e2ac42ce065ff974863d35b84fdb1d766a6660468b2a6ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157967 Malicious code in lala-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f84be5c49ef51928dc727900a5908111c472d4ce2af9ecf299dd8126f8afd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdcc1152b92f63a4c39f1e24f3aa80963fab662bc085afe0c367b090de8d89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdfzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf73f336c1dd1acf4313987d10f1c94158e835135681909189fe38b66e33927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1ab3fb5298ea520cc94c2b245dc80925d645513a0278a64954f7cf7d4c5f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobi-amuasui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1959fdda209d10c7ae30aed9933249ad3aa6aa8dff4c6a2d7b8a23e2cb01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muyatia-nitu-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd85db0ffe2aa138bee9f0147e4f7401e42efe49c6347712ddf6730c09a50920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkkud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de11ea24c739ff28b453d944d858b0e839ca779a9ab5645604fb7dfb1ff84e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamufifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81f49273edf2f9466b3ca8e410c704addd0ee2f05c4bdd55c94e4d0d9af7efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dec3c7d9669e526ea03af7af67bf6a1a13b3d524e01a26f81bac9769fa67cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e41e6e81335c20519ec17900ddc4517469609988def8504831591aff2bed26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728a9fb2f24617af68eafa9ff696b5f16137d09c7e5fde3cb937f82a3ec16c63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c049b26c6cfe18cc64aaa8da7bdd8153f8e0c5f6c08aaa44ba2f7ecff3cd5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161670 Malicious code in nabuf-otomabin-nufaiagfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32276a2baee9584182eebbde55250b2c7c66bf48c9321669654536d97a0b162d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162439 Malicious code in nokire-arjuna28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc666120efa4e0a1b04b81d76e44351c9e67262bb1e4305a545ede561b16ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162281 Malicious code in nokire-akaza66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868404630fcc591e57b04620f6113515a030ec272e564102f259afbc1b48ee31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...