MAL-2025-162305 Malicious code in nokire-akaza88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf51bd4d5cdd8aa7fc6334616f485aaf1b933966736511755771f45956ebf146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157813 Malicious code in kuinsu-uki-vilabimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d323c2324c2242f9078f7d73cdaee01e96447154a932b08ca8d4d44aa064c33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168212 Malicious code in tealove-coki8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6a06df045b3550a423722af53125bdbed6358b05386d2b03e33d649e98dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166485 Malicious code in sunderlan-uyud-vamukalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8df0361ec4f8e19094088eb419c49af7517679c523844fa06983c351a90db3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155107 Malicious code in fitra-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e0fcb43f44d5100881477819709a9e9e4649fe3f807765cb944e8edc7891b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7291ee7f2bd77f0069801ad65dec55b1ed4c13be956213db821517025fe0189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-ssaa-t11a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6f1b1b53e140d94e262c3ca4f509678a963179e99c0e5b05b6c05f4a61cbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luaauavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba39f6ac9a832f2405ac9a933328db8b31623fcfc2c8976034297aa7014d00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-asras-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00438ad9fe55548dc4a977fdc3bad9f84535b599591208b0b12e0ad6428d49eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b652b7a36009e429748405b3023e0d8ef69132b8ff0ab149ce5a0e17659ce2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff1123100fa9c082f85bb48c95034eae67ab9c27c43f4cc1ca2b4f3abcb0525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d549ab41d99993c41bec22d5da9e9bbe8d064406fd4b6f845be7b4855de36061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budfaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016372ea85888e0afa0ad32a7ad463b4927d266a4507433f10b6de1558151d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliina-aiki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd118f8ffa409cff0b5456a60a24a3123fd1b6231c61e2c0991e31203493861d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8b67e02f4449030bd2a7ebe066690248c640b513a65be39f6b80d9ee6331fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kwnhghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51e962ece28c9b7a82c1b1733559a065312d49d8377221b38bdba35a7d961a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86e1056c147236e6725d859239f714bc85003df1f9a63f9cb8bb1a4eedcebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgg-musni-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f111b0730d5fcd97f6c2e953fc512a82837ec792c7649970b2ccf2d46b868a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1350b28d99fe7be59d5241b05ee7f814e5fe2948851b1bdeed95b81a1032c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nanagai-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35da831865283f8d7a5569504f4b4c84f193d66387cce3f9a77d98d6ef223115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...