MAL-2025-158265 Malicious code in lookingan-konam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b3cd55de4080be2e4f6e2ebde70332f5a4b78e04925d8e91edc50824daa90a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166855 Malicious code in teagood-cuekin86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6731e5e1f0e5824660d25c03986de9d4069d41442d4f3ad37c98682600509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167883 Malicious code in teagood-yakuna26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b88ff7e5b1ed06c2c0c18dc91af9aa9038b30bc2925c0b48ae3d8b6f4ab3981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152749 Malicious code in arif-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd3ebed6eec632c620c374423d4122bfda4ce28a65e0289a567cda7efbc7bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166689 Malicious code in tadashi-ytu-bsusty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162b8d97bc6bb05ad508ba6b6c3b04c30f726ca80ba11a12ea5e8d96aa307af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154112 Malicious code in cinta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512bac0ca01f1d052dd95965f36348cb9d06ccac2a343b2f9dd7642940d1383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152085 Malicious code in aji-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e193a3e43b7951246b47c9c86c0bbaa161acfd37a26d1e39d45860cafef7023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169914 Malicious code in uinsu-losit-dilabuabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481a0e6684bed9dcc123fbe14c615ac07a05727bde3d52b53a18b3ba4a6517b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150043 Malicious code in @mipta1/hdftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e6cf8e94375788219711b3acdde8aa859053a4ff314a36a17cc776ae9d4f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161298 Malicious code in nabila-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdecb844830d7a78a26627cbd1e7d66fd7770c574c9f69a706f63ffd962db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160395 Malicious code in messi-urt-efduds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8a449ee822a9d43ef7d2ad18a3b790a5307433f1b3fdd60ad6ae16c4eb8467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0743b0a3277ac95ad6bb4337622915bc03ffef76756a3203c975664cfe857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotipmi-kilarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057a19f45f515deff38eafe8648667c8c61d94043cbf06faeb43bfd6fcc6af7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobali-janu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b294f95320b5110f75047876573bcb3c4666558bff81337010ae0e11428c935b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395d61c5693975779df44414092116715e65f9772751ffddc83074808b6d17f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49851401c7d9b87cee12072a1e75879bc882d01b853906b6e0a4e1d182d2d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufyu-tadamafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ee8c37cf18de7881c762d58af3ed3d938b1abf6f7818d9133a6b6ee729ea7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6835f2c2759e1dbf3f2834a931b2b82e35617c4080d71978ff630b65692141d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd7077dec104d478e43cac8058c4070eacbdaaf3d6494c80ae09d63809df56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166593 Malicious code in syahlan-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cc552c84b3dc65faa96e2e50f0310fe961a5308224809890c3c0b43c2df6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...