MAL-2025-163750 Malicious code in nudela-ff-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29278d084534d03014b10719c2980bace598fd51b4dcf4c34c5ad58ac162481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168629 Malicious code in tealove-okta5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f653a9572e85db338df85cca97be2a482f1839af469c957a889b53fc805968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158839 Malicious code in lookingan-namalaka29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 407b8c278f4c952d9ba7634b375b6f72632f1dc143c8c78a1c6d25b4933225ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153506 Malicious code in avomainah-fragis-oguanafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41507c31d8ebd59b3ed6bb2267c342e49d847aa91b7302b33cd002a76751025f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168518 Malicious code in tealove-nice39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f72b963061719c7a615472672dd7876e8a860b0c165c2bf357ade681eaa1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153939 Malicious code in bufpani-mau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bf26377b96e31fbdd8e6d7a25cbe3486e7e3ca9861797fb64fff8d26366a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167326 Malicious code in teagood-nakamala6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d318739e7342af6f86a9e003b29cfa80eb35f14097b7c8356f8b888efcdf5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165546 Malicious code in sabuli-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac507ade7b8851e375af387f7e6dfa8270063e4f0c540096cd48e964d920559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161749 Malicious code in namada-kasito-nutro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469707a92f7f1415f2443981bbca6e84654c69b89ffd5a5ca48f53879bf235e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166025 Malicious code in slamet-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77faa24731eaee1e69ba3896120b1a294748234483f4481709b8b4b81f2b572c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167274 Malicious code in teagood-nakamala12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d565bee875091dd9d056054670b1bce3f7e61c8748751c5505c95080973cffcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157619 Malicious code in keyla-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16674821d954890d5fd5f661d33bcb8d4f7068b7588e9ae70ac02f2f07bbbf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-minats-addutfdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6eabdc620605420974f9a929b6cca2e5b2b48e692f4e08be02c1a5857c14eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofoayif-mutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f109cd9ac5ad18e788f83601df54c74f4aed7a0078ad4be3b176c7dec7adb22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e1732ea3c88dd80a5800e4790885f46ffb8c22684eb2b1afe8514704bee237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/aghgt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71811fff52c56a4cdbb527691784069bf48fc2b368fe2a58c533268f86d85a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safda-munarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5218a446a0a9cddd78b00177ded6deb956a1cc92544af09db9c9df12676cd2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadasi-sciddor-nassop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31a201d1a98bda06a853c5c370eb8cfa181715d26ee17474b339a49a35dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-janaduri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165de9b3331e8beeb85a7e7b71425f7fe9ae127ce692be90c288595eeba5422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e839b94de9faff19fd1ef09f97091ae151d76ed0b0d1ee5e285d01788d68cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...