MAL-2025-156252 Malicious code in ilang-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f807c55c62aecfe39e97547be8d4ddf185a779698d07cd123dc3fb870a23e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac4189e682bd61c04c05c948cbc956a0378acfa6ba9467d6c6b5056878a1ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyag-daifuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0265bb15ceac62436425fff4162de83ebb862adb099d96c709fb91004481261e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07aa5087a07258dd8fb3a5de81b400b496764a755915328d6bb6cfb778f2147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8f94d9b467086305ea216541998f596a2c495cd767079c4b602b148b5f808b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-dfafigika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158ac61f01428a458488c353ceb28443abfdf391e7b335ce19a709ec3bbc1f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154417 Malicious code in diago-kauli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd60b8d5e25caf87400776dda1117283bc02213b817d695dadaf4092ec5cc4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157338 Malicious code in kamasada-nusta-budada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54d19e7e38ef83308e3ee426cbe1cc2bf9e2c65bd4ce5d86b75516b4efb0d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168033 Malicious code in teagood-yakuza72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12447435e151fe8b959cc23d89b87ca7f9772926c71d31c41f86c017e0d30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159707 Malicious code in mans-matdu-huma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7395e3ada2490f33daf21065bb4004843b01a5556769aa385f781ad024fa1cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyatsi-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8de943658d23a4170432bf3ab4238a8edada9af2c56d831a06b72babb631922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41b4a32937d74aeb7f41c6fc1eec985af8c2bd17311ebea29f576710731aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31dd4091f930aa60073222ee81983df2a6ba992fb733a3df58aa2fa801100cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2292533ad62469abb78353df1ac7960ed109de2e7f570e2fc5b09a4c4256a6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b485fcf742dad795c5579c242becc06c58173ecebe3ada950e2643f50c3f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d17f4066fb117d778e49d43e46844abec3a35807d4356bb7e4a154cf038e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bfc51e52ad652c69e80acc8c87d5ef2f285a287bb536fa66789881a0d6accb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af313c6ff1e014d096841573516ede56b0603a39de43150a50314176bf26bf83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd83a63c3403e4271bdfdb56f713cbd93d3c5c2b4505b89e548aec48ff0eed53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...