MAL-2025-158913 Malicious code in lookingan-namalaka96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1094beb839acfca44edea44fd15c09ffe22f122f1f27c3478c181154914ddb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167605 Malicious code in teagood-nalikoli5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d6b3b46acf791c6e175392bd2d2af139b81cae03b7630bb1faf3a171a9cb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163792 Malicious code in nudela-ofgaf-gafgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d8b8c41c74d7141d4c2c237e322f1b1e34eec753ac0501200553984cab3371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161155 Malicious code in mutr-sds-bastpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc10f5ef80e9332c3e801dc5cf23c4c832341af62cdf5aede905e6b111ed8792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170307 Malicious code in verify-ain-ukas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debb4ce171e9ff2a0fed8e72df999de7a42c2192905c7d056eb2ed0abf8f2576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155607 Malicious code in hafiz-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ae82fa408dabd9de6f26981c3ffb7b4f385a06592aea3feb15836f291cac87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156632 Malicious code in inufgi-gobali-janulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfc27a04df0933fe4744c95c22b14ecfd8e54652fbaa14a91e4c2849e60ceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd29e5f5222220ad05f3f6696481297953fe62304d1a7cef965948dbee79968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasiak-butsd-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7974fec2bc4750cbc562213688f79e7e82b9ed546b1eb81b6ed930c6cc9b4bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152330 Malicious code in alita-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8d64b3841315713d4be4dd4253771ff3abebc1aded8d916054d5e0941ebaf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154288 Malicious code in dfss-nduatd-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d17a3ca0519863beb31273a18a3e3e22153fa07e1f4aca014b911e0ab4bd6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35726cea28a84fc9042dce3d0ca4cc283801ed3e1220619c82b71ff82c4b2d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b938d4abcdd23ace5f6e455f9f759e35dff99004dc98e03a565ee9620b559fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159417 Malicious code in manadsi-sdda-middarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0953b16a1191bce5f44e20cd49f8d13b48b21fbb297afa2005bc8f1cf9f39ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiguagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf9bd5395f960175b979d98c83b4d8a5fdd4e5c6c191b4f835516ae4d433f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31c6ddf2651604bb770448f532f2b09ff54bee2d2d66b60d67a4a37476e2538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb78ea8a09b2c922cb5bdc7b92e40193be19b290c5bdd626ebad1223d461176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94553c9bff164900fc849333a5e0cd5377f216762281d1df92c335781d1235c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fabc2eba3bc2979a8df8a46054ece1eef059a96f17ab2ea8fcecbd38929bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminasah-aifogagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d87991b864b56f1554d4b19a11bde462212179881b865cbf5f25562605326d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...