MAL-2025-166413 Malicious code in sunderlan-ud-vakumani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98e1275b68ec306a4e36d1bc0a9401460a961a50382dc33767ff5a361178af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160928 Malicious code in munir-teaars-sadassdaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2803be759a65f65eabe2ccfc21d267f7a15a9722d2665716464e59a916e226ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154319 Malicious code in dia-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372e77d612b0ec10fc69dbedfa115457bc9243f66a9d6110a642dde48fefe332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163129 Malicious code in nokire-namiresan73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f35a18c78a2f5a501b6cde5866dc27fd78b548c8fd35bd4efef5b2f5648b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154123 Malicious code in cinta-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bad0cdc649769345341178fa6ed94c39b4b695946d31abc4b65b2149555be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159605 Malicious code in manda-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665537308432e16e8bb5aa57f85428f060a8b8f85f4b0720ec965824e304e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164054 Malicious code in parwo-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf1fba8a89f7d4bce2e1b03dda3497a46659d433653bde9c1d97ee99fee0ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98113579037909070c6dae22777de4b62617f7477f6c4223203a022ec5299405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b00b2dc27ea8eb101e5027453fb76c3e6f767f8e5fb9449bbf6832cce4f633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0845cbb2442ab1422c9ff819814680fa21e2318fa7a5a2fe2a56e7a0a48db25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160ebaeadeefed821e9fd58e6f650e6ec3a74096a53fb641d45b88c6c1da733e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polil-akilamu-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e237799f0852608095c5aad7201a1479f6f73d7635dbfd47da16bf42acdd5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ee309278bece88585e33a1185b367f1a51e9aea31c46d1d65343cb7f3e4dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudafsituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96459c83c4c0f78a52ea77147ae2f74ea40b288a6c7cf3fada0f1251eeb2a8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1b79002674efd371378dc046f81815f33031d11e4c0781acd414b45a165de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89405cbd14c21e28bb2ea1edbd5c0c46c2ac5c36f3fc92568fb09c89d6fa992e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46f2b99dfc1e1c960e0d281a8f54738840c3be27651ae7ff305cacf579b2774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgg-musni-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f111b0730d5fcd97f6c2e953fc512a82837ec792c7649970b2ccf2d46b868a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in na-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd71b0c92a64c87ffb47dac0dd7ef1300e9a4bd457725536cd386e9c23a9e73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2ac3939c180c79f3be22e23225f889589d20568284f12f6bf936614e54b655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...