MAL-2025-153568 Malicious code in avomainah-frauhfu-faqifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67192bcb20441bb67e81714886b86ed20cb39034a3ee98b33c8e26fa0c830e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154761 Malicious code in ertacssau-tery-mun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba538f4dc7cf46c90b1ac3acb9569a45d0bf4381cf5117d1338de32f8684191e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157897 Malicious code in kupai-lulikoniuta-igavugukafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4ca70c759f33f4c4af39c2b6765013ed35acd633c63f2f1ef44ca7f9a7b639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158010 Malicious code in layla-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4d5731c881dbf8749b247116d6b9cc7308b214dc0438ae87a814080c5e4f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167652 Malicious code in teagood-nalikoli92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84566126257b1b0b87f18ce071bf0704b0b0a2fcb09f0573a46e2bae30f0a98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157542 Malicious code in kentung-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c9d390ad1631b0cf4a510555fbf671d3f747e761ae0b441296417f725585f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e03a42cdd4f5aac47c346804806f6989c4d15b9f24d4d3d60c292826da7a53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d96671a5039840e661046443c107d9a0297150faf1c5b16fc90c4b6cd9285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2397b3154d0f90a0d4e49796eee9ac7c4fd8418a5fe8f52a042a6a62eecb7790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c996e9f977a1962f7b0a71ff22f70776991538baffe2cc686d385db2180dfee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-fallen-widely (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7478d7aa0fe927f2707e9b859d06398bd0c0b0d7512e18d79ea9628a16ae6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/jns-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc0c03bb2d04ffc9eb406ebffed10b24f257b43cbe6ea2a411b9fd3a8f53937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir135 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941a1734ebee31fa2a02b0ac53bbf133e010862e4372f3dc71f999e0b456f0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/gupusr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2f12e176a31c9808dc051dfbb50e93f704d4bf0930207677cfa064951d1881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcad87d6499290e4f1348d38a5967171f461ab063a3db6e1756629374b498e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed42aba4eeff4ddc5c9b3f0d55dee12272edfd4940f8cabc900678fe0557720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccaa5fd2e1a7bb5e352f5e7dcdfff8fdd05f801496dd908754eea39a38c113df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3ca895fef43c9ab70f55a08f40ad0e9a91d9d3c489009e3c9521537fd98f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kilo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd5d86fe8c5c60ddfda8ad18b8381f780b9e889d5d05eca0ec63cdf17ac6e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kauli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd60b8d5e25caf87400776dda1117283bc02213b817d695dadaf4092ec5cc4f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...