MAL-2025-158326 Malicious code in lookingan-konami63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a086d84cba9db397c554f131841b17af5b2f23fc774f37fb513d97d9252d059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162504 Malicious code in nokire-genji18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09020577b7611611b5fe984c81937481bd06e6754d92b95f179537ed64c8ece2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170488 Malicious code in verify-taicui-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e19377d32278ee6717bee407ed3ebdc7a49b3502f7c81aa1b3631cfd63685e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167868 Malicious code in teagood-yakuna12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9f29f66c9347648d6b17dd090b8893a446791ce9302a278be5ec29688028ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156062 Malicious code in icha-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48330860a3254ff5a97e73bc56d79adf3a774d2536b9ddde56cfbbfb7b7fa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158170 Malicious code in lintang-tea13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6552c3bfbcadb806ce9f7f3487c959c7804d5ddd923138964f18db6225b201c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-nutray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfedf2faab583b42a9681e9aed7778129f7e6bb43f62955c3959a75f21492c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-nutradfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1970918193db603cd868a4d752ba001d60432a7ac3808463efa7c26484e1593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9eb73305040baf22abebf80a5655390dd7954286189866b09f8567498aaff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aln-tl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6cbdd08a77391dad7b6b6655e826c0d5e547877864938af83bb066c6b3cc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2bd26988f770cd8f92c15d46024b6f89ecd9158bea88272adb443fa6c4932ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilaubaukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05146a01c25df318b8628860df7f1331a40ed389bf585d9ac89c45d45e17cad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-ls-dinabusab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88916cb6242d727a20d94348e9523b60c404f0ef78b82097e034ef8a3b38c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kalop-kalosoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697f63d42883b8117e83d4b79215fd2b197df0098178c216b9bdad280415e5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milraoa-misodp-muiokp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f74e245338ba0adecfcee8645c5e1f2072e0a301e49622115d2efef025b40b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd76c26b64dc8695b5221106d4fd702e8ca782bb08fddfa5fa843925f84c4b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5cd3e314f699d6d3b04324a896998cdeffe83cfd404917bbf22171eea1b123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gafohagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100226555d0b4a91de69298c3fff2af9c9bfcf2851c9e26918435378d67156e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamiaakalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e97e7c25e3aa90acea5c81486677f7ed6a40239297e6b92abb9b13cee25eb88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-janabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815a14fd7117a815d01ebd6968be423c37a2726eafbfb12066a2ac439da7a812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...