MAL-2025-167982 Malicious code in teagood-yakuza25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f10067a88ba5f6b6e8c240256bae57422e3a6cc22eb44165904a1eed3c69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162398 Malicious code in nokire-arhani81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03db4dab919514988a13dc5d5983454236da392f1d67cec3554afff18ca6fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159755 Malicious code in mansida-nomfmadi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4876754964f33c69371c81556c1b0150dcd6fde95fb7229388e97703362dfede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec48c50ca31c85f984a5ecf9de612a6f8432473138947e0248d2e80caccd2d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lublio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546e37594e36ebea64e2a6e669189701df0ef8309b1b97f71d804da81dcf3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0246fcc4b331f8d071de4c2a190f3ed4427f2b015251d0cf33de369aca5e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155830 Malicious code in huda-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8599e5e2dec73e26203d472053f60d1dc061a9093b7772b59196b5151aedd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159509 Malicious code in manaf-asin-nabsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de26b760fdeeae2980b3bf9064790525924d3f0136dc8f47cf409484d4aca234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151246 Malicious code in abiba-alvabai-ayuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffed5bac8bce72c0f300ababed99064f4485b9cd80f0067748a14043ab14a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149907 Malicious code in 12-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31ad8d7d3f2d8543dd80077bd3b9229214b829733d907c7288a5a7babe5a617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc12dc66ac7599b9d7c68ac157e1610b7081b21c2e0d06b1a8521e01d5a12756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansa-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5aabf040c87d26a0a5852e6793deef938fa02422340313d51541d87ec14059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufuai-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b4b85c50a53db49300d8ccc261eee877fdae77d7ee4dbb963dfa84907647ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-iga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78fc52d87782cd4599234ca1eae1504bf127ab1a8ff0b52b05b387cdef210d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fe020991486f19d5431766167fa970152a101e4215bb0aa5c07ecca8f1676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfafu-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24613ddd199978d7ed585cae37ca4dce975cc7d290a7abb10195ca5a523bad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8439f7f095233664546be7808e441d9ed93454a90668ddccb8a7c67be7354162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d0860cae5256e92b4104a409ba9d6f0e725812bd73f1b7dfd471a09bfbba37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foa-jalifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266fb2b0bee828adf61ff10dd6cc9b76054621d5c1ce25d4bd6139009a3b1ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...