MAL-2025-154119 Malicious code in cinta-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9276cacfc714e93f443945a7a137722671d71c26b6e26cf7ea040686638f86ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167318 Malicious code in teagood-nakamala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc4ad325a18a1ef3d9599e1ea5bfc4f6e4213bab307f2d0770adfa96b99c54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164588 Malicious code in putri-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41986d6db69434eca79514d375d05f3878cf2793c9e12b1156985c987034e4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167749 Malicious code in teagood-namakai9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5e1831ac422474064ff171f1f3ccb47c10ffb6f08582de28b616bd91b1c9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166255 Malicious code in sunden-diak-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef35d39a26468cc8fc51788a95799ab5b094d9b2979fa05e5365628583f4352a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4840e37b4c52a5531890eeab3169b17cdc55b8a9951f4c7c8ece98a94abdb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161808 Malicious code in namae-naga-nuaao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc1e98c19a4ac4173bec5501827582e41de31dc9a7443a3e43efb39896e330e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161776 Malicious code in namadata-munaroha-munis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c42c23bac351ec3e0eb775d107924567fd9e30da9f19471314d3676eb1a35ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150998 Malicious code in @miptaa02/vefgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d6f936c1ea1ca70cc49e1362de3749e33a31a29bda77f62b6704f5bfb5da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152291 Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161544 Malicious code in nabuf-otmbian-nuyafidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1007c6e7f5b3c635acb0d0e0748868cba21f57afbac7806b8ab7c5b3e9d652a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8782464b1e3666d619488b3b3d552e889bba4d0147b5e7494668ea92ce5f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bfugabafiuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cf25f14414b0ef2a81e0d3b75ee330f35c44c31414719ee2e4044057fd5036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uasuafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec539321097dbf8a204f56a87751dd63cb2f7ee79e8f399343481a816116ed51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0439168772c2786c7954b6ca39a211b74eeb233b73c554bd0b3d0cb4fd473e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307446c527470b012893b4db586091294de32d852901366afd20b4803d44feb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yisas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f214e16b3644a331989dc5930d73d71613641af3e149d7158871c4f32215e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07657f9f3a781c4bf5fcd7c2758744d1808657c20faab1d3c24dce8fb6a6ff35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-drnk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f837aad86736d52968f1ade92ca35f94d764310e3540ea88dbf05a5460fa4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tsezar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae575becc7093455eb6a2c1c2c42520f54bc9e5f73074091681aaef96fe4838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...