MAL-2025-157518 Malicious code in kentung-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532bfb26621d7810f331372311b1991dfbc66428059d27feb1ecd42d383d5288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150415 Malicious code in @mipta19/ryfgie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb1b7301269aa62094330cb07ba4ee70832385dd66dd13cf3c3a188f5744e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151490 Malicious code in abiuba-avungi-agani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fad5ea2cf2253f203e0cbb571e61a985e46b008cfe3916ab22cb9fe59bba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168737 Malicious code in tealoveness12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79b78595c006ba58674a0317fb410c5a9d7b37113b959cfa472b32f7d63752c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161618 Malicious code in nabuf-otoimn-igof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2b8d3ca3384fc5134e6fe9b18b3a794816bd47c061315fcb555f1885bf4e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162209 Malicious code in nokire-abimanyu90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25ad5e98d940e6ff708f24d058ec290d19616f5897bb7990fa999d7eefc2c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167004 Malicious code in teagood-lokina4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d382396a77d197ed55302fa4fe993cf5c5861663a0235ee522b651f34ddd3866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156730 Malicious code in inufi-gfobai-jigugmafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e471e4f7867aa9dc24e1a55c0b8e264279efb48985303ea675b4c5c5ec126552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161390 Malicious code in nabuf-otgaf-dofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea3facd54021fb0c0e1d89797d3d91b9d705ba4e7b7a686e788ee9d759eace4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164470 Malicious code in polymera-manuyat-butiyaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0d6b1d7143413c427313ff384564d90a0e1a4b2843ab7ff3b9145a7329a2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154468 Malicious code in diago-kuli-luviakaumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae6fa0954657524b9dc4e6151f53de95757a6501e5922281faf3a50bbe352a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166511 Malicious code in syahlan-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eb25dd4c172adde19650dbdbb5ec04c2451b581f52a274a777d8ebcdefea13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168536 Malicious code in tealove-nokire1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d5de4caaf301aa0ca9eafc1daf4746da6621409d8f22f34a6f40b81bebe023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156819 Malicious code in iqbal-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53621f5f34ece675fa8b486f5c1838c188cc879372a3ece43b46f8b4c9ee043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151547 Malicious code in abu-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fbf0c9f59f6c6a6442a3a8ae034f9adfffe2502b8be0b5adf07f751a42c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuak-angi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993c6e1b0052bc27878774c6f8f555053471fa7db0691e1d26d702e35a888016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604020f11d7571d2e1b646d40e45335b07edb3a96d43cd94e423be55702b9d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7842c0e2678b581c205199df0fefb75fdb31a07e0fffdf46b760c512b18dcf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a261d538b52f89870c4316bc0bf4974990725871769e03255009fac5e4103bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0a35d76bc303ac96f08655899e6c912bbc97eeb68132cf96b3f666676fd4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...