MAL-2025-168442 Malicious code in tealove-nanami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c706a8ea1c6ce2934d268a1949068c7bf07182bd3c0fd3427e17eb2f4168339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162545 Malicious code in nokire-genji55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002f932786cdb9b624de68664753efa9a1ec2f9eae998b51ff7c647e081a2438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161053 Malicious code in musnisdr-terd-minuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a672740b1b1a3b17c54444b11c80857223e28b79490a9a3496afa74ebcbaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169387 Malicious code in tusaaya-s11s-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93721ed9d417a14b3a2b2939320955f8764029b7912aeef75bc4dffd335a2130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155291 Malicious code in gifa-ota-uo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cefc86278bd4b2833be8a9a66f22a0826db5a17d6f9bd4296ab429f1989329e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150989 Malicious code in @miptaa02/tue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2a6ab1f78ba55c366679b1004adfc730167da976e179b91703cb53d7fda2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-nufaio-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e724f190307e6c88313b0515f54700d01043a07a13afa398c2db03e0d90d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557c10ae595e7679943799aea7b48b3a55248c02be7a13ed3bb885a26c4d9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41695edf2525dcba72bdc9ceb4848a675f4ece98c1d862d0d174287030a860cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a0198a79ad2b3623c1557958c5c623227b50fc51efed0099f7c5eb019f81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0007242135cf53223b6efcd1da50868ebf064aa8c9228f47041748ca9c34b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9011ec86967ec7365a38995cbcc18feed364f0cb7720ab937e3904bf84d1cac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d268b79e41c70b71875b918b4ccf3aeee0dab2d5b788247979cdc91fbf5fc9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafru-tut-dutut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b560abc1b0192c1919823383240f34bca07cde3b2f025b858f6abc524dab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b089765145552e271c9afb51aa247679919740f304d972393e029bd3ce8cb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e53a9cba6acf18ec74b2d399680f4f2047dd3112ef9a010ee7f9307b450ab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958864736a9a90f0297d702e86db536733059eb87b7ccf39b6327b1eaf5d66f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75962e0e406e817ba4977fb5213f8186dd4d73fa65a662d522f2c070899c4faa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabokio-moikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d308aa2f67c9baf0c60728f369b77d4d3bdb03734e61e4504de19438397747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyti-nutayadada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149e653f0f076a4b3548b5ba44ec58ac29eac69a0f642488d04341470b6a8a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...