MAL-2025-167795 Malicious code in teagood-sukuna41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b863728da9e2314382b8f4669265570868ebf7a959b76d946499b0a72e9aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169247 Malicious code in trevora-cir51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9634cc9dffab094e9c48009248b4cfcbd9c904b4a8aaf4e8092d11be7c28b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152465 Malicious code in alvira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af79b3a7520f4a4dbaea0f53cdf301781e4ed5b9405700a6f53fc3820d0812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159809 Malicious code in mansila-tiaala-magoaaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb095d38de986463e06f1ede01cedfe48371e72ee99696760c8873ec2e4a21bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151006 Malicious code in @miptaa02/wat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e9c8ee04838693ffb9780edc2058e6d520c88466bd85c67bb58493951d0041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153722 Malicious code in billa-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bb7b55ae3cbd07c027db486292f4bda7f1191b87a3231f32c6dc65354a80d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162678 Malicious code in nokire-kilua84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6657b9d9e62e0e73b7874b53c4ebc771110038c78c085bba68d207962740b83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154471 Malicious code in diago-kuli-luvik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af2832e26f7cfe6074274fc4d703ba1f1de8b4d8814bf7ed1c84a93201fe10f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152237 Malicious code in alfiansyah-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6768a38c49c9f186d0feab6f2b5a40a969afb12c440477b73c5704bf6e1d3ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165353 Malicious code in sabua-muhay-tfau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a93d4cb803a31a6622e4881f63e68dea91e4f8aa9a277d2f22cbb187eea60b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150607 Malicious code in @miptaa02/fagsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189ad4dc09e5077e693f2318f492ecf71a75d19889c1445665ed5d4a2f26ac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150578 Malicious code in @miptaa02/dzfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998f35b4b1c0fc862c9a748e6117125fe0a7aeb6c86b76bf77ed0981fb02c573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153107 Malicious code in avminah-fagias-fimokafiguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d25fbb53367aea05f945c8362690a8f76afb532084037cd047c21b1da13d0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154313 Malicious code in dia-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff1123100fa9c082f85bb48c95034eae67ab9c27c43f4cc1ca2b4f3abcb0525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166400 Malicious code in sunderl-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdcb8a49241cb672dcd231303c106f1d1b3c0fdd0aa07c4387053e70603c56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165022 Malicious code in rival-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe574775a6228071481c64a2a0908e479d4bb15d92f9681ab86f439a0fbab5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167432 Malicious code in teagood-nalikami33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c430b8d369d7fe5bb5af377cb9a41cfeca438f1348e0aaed877fe7135a3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168276 Malicious code in tealove-darknest20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fb6b377659139a8d88ddcdf293c833a13c5b8235476ad1e0e89050c38bc47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154003 Malicious code in cara-bsunssns-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56d47883e30052be89fa5680ae70bf24f896c70745d772cd215e6e345c0409d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155914 Malicious code in ican-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4503ac14cd9286066c4d82f22627968fdc20cad853b7c694e7e48ea0dd69e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...