MAL-2025-167473 Malicious code in teagood-nalikami70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db51b855c0771b4d1e2234e69b965e3203695701f5317a050e47bfeddb812b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169231 Malicious code in trevora-cir37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa440742da125a2998efe2d80048aada9929fb618659d47e1fe3f0f633192b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150553 Malicious code in @miptaa02/bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437e4049a7a387c1744ccf8a920fa0182d62caa8896a0b266deb69a034fd0fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161512 Malicious code in nabuf-otmban-iagafaipo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd14fc6e564d19fd88e20488a3f6466e66ed9cbf3a10fba2d617c5c49c326017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162074 Malicious code in nitaus-r2ff-dseff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faae13436883f310509584486ed71c61e21b6042d49f9907c9f252d6dac60197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168345 Malicious code in tealove-lady38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fb9a62c7ecfe6c7a912dd33c9d187880a6ebb7acc7c8c908b21fe7c09c90c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160068 Malicious code in manurung-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b08cc8314c3ade92e6947f1f89b2a1ab509ae4b7e49f7972a971c5e1b6d0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167487 Malicious code in teagood-nalikami83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d7c5199bf752577781a3421cfba94598e8bce5b390119f5d2392e2ba6a772c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156502 Malicious code in infi-gafobi-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b91d36a366ab2efd4616dedbd3d43a009df0e21bdf6eda905ce7c01e8af2caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160601 Malicious code in modirai-fiaha-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf2c359848eba35c75be168976eb3997cc4817da7a138c362cc75b8ae80f85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167137 Malicious code in teagood-manaki7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5bcf9df6aa2781957e35443b47ff7240bd46db2df72ecf08f2ea77cbcaa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157644 Malicious code in keyla-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247c5e1c87aab9b2d6fcf511ea95909686752e606b04983c2d0c1f46c468c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-dfgika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f160e779eda9641435b6e11565cc03bc0acfa5324b911fabfb5664a674f7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2af1d07dbdfc662da559e2c26c138a080b73228db0e5381923918a5870bec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-nutara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e5256a8dadcb143380182f9eefa58a4d35682a3fec388152116dd52d350d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea4044bcffd4d44116f30e4b8302e80ce589084e68084c14c0dd1d9a300ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1069fa97ff0ebff41a8693247755604644aa1bf201117ec04e34396339d0a48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabi-aliga-aihaamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552df4886b0af413d8dc813f95893a5f59adcd844d3bf7d4f920c629f8248dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1acab3a0baacb2ddfb14170e4913647912152e5eadf17f27437ca58d727f6c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...