MAL-2025-160607 Malicious code in modirai-fianuaia-jinanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92beee8812e9f4d1b4e3ea40a365a0faed529bd2935fab12bf9e079d653953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamoli-ailasaloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19780b18f468404c4d5c5070d8d8709b5b0e68da7c64f75758764bbb548fcc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d7beff86eddd5a9a477b696907126110feaf9e8c93575f339668c630c9d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mus-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aaed3f37853c02a3dfc1f3254a6f34f4199ac97c9cc9acaf02b4b9d400111a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-danger-fua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77cb7396528a3231ceef355c4c75eebfe3dc74b95056f6aeec5cf5eaab0d1ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166699 Malicious code in tea-osss-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d0d9bc2e1ddd5d34d78485d00eafa0cd62cd981cdbfe22b1f4dcae14b46f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150250 Malicious code in @mipta1/sisuss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59ddfda6ebbe9bee1c933c951210339bbb0a0cf0e89ea8a2c9d02cfa31a3f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151112 Malicious code in abeh-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a4afef2a1e396c5099e6296a1cda1354063ba7602ef08280d2ca823cdddd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167392 Malicious code in teagood-nalikami119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f4d159dc1242f35cb84d1c93eaaa7f74b82794381d4e0ad74cca05f391d5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otogamafian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd7d04e17e3c64015f8ecb2cfb4c79aa3daab3715328a91e053fe6b990a4d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8228f4bc40ae0aa14dd4346ae2e3ad9db582d22f3a104951943c3c5277788193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-limikali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d915ecea11bae782b9b6a2ea5b0fad598059c1579c56ba8164f9386f337b693f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1160ffb1ce968341fad746db182ab92b48a28a8f715b41781c5cc65eeabc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b820e787618fd2d3d956bc79c469aef8ea306f4c93597577e23ef27bceaa53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d18892b3a203bcf7ad7bcc3c0a3f2b0ed0d13b90bad6abe117568f3be4a1d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e00cf79ad2958261c2a7873bbb79b5ad3e211236cf9776c21060cfcce4859d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168607 Malicious code in tealove-okta3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cb323aa32a275039f57ef4cb02e839a48296f6910ef8e6d27a3fccc6ed05e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162862 Malicious code in nokire-loklok11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b9d1619fd2afada4572e4ffa9691fb2d85d532e354eec8443550c2a061e392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152756 Malicious code in arif-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c57a89dd5efd6039fa90c8a733f3afa8daf84f0cbafce939ce95e1e0649ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152422 Malicious code in alvino-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6287610bb2197273311326c2d681c944c2ea76fbf15f0eebeec07c9bd5ad2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...