MAL-2025-167213 Malicious code in teagood-nakama48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e71d3e3e23e1920caf6aa29e2f32cfed491307cad7942f1eed40507f8d84768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168394 Malicious code in tealove-nameka13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b650f77806b33fd1bbb93154795765fc8f5c0980960d6aef480c9ffc7ec91679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166617 Malicious code in syahmuda-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680a99a9bea0966e451bff5e9da05ed590339a577a57a350be05431651b4a5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149916 Malicious code in @mipppp/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa58ae354bdb6e231cb7aab5727f0e34c4590738f9fe38a2d0fe30314157e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167635 Malicious code in teagood-nalikoli77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5d80b41a1ddfad735855ec03d3c95c66429b15d2c249c23803e2af4c956e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166383 Malicious code in sunden-udilsk-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168646cec68e0fe98a04c853c72e32ef7e471e1e3f811160bc5fa57a212258f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155982 Malicious code in ican-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72dc7367e8279ce2f8f6150cd6fef82903b98343df9936a52adcd563e46a717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151041 Malicious code in @miptaa02/xdz2rdtj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483eba19755acc71733826a3cc7f3120553f4ac7fd6d564fb830971fa4edcba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165367 Malicious code in sabua-muhufafyu-tadamafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda4765e9d34cdae9b6eac60c4896be6831a783505c0d44d1f2a50bef15ebd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153777 Malicious code in bintang-tea29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375ce1c9f7112040b40543ddf890615f33604c03eec2e6f16cee07c85d9d9282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157786 Malicious code in kuinsu-lukoiki-nsnbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27745c20f4a043184c3cefda246f16be188c6a35be52ea9b0ba7b29204ecd9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164819 Malicious code in rinto-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43802c7cd118140e9a4ebd026ae4385ab900ac8c62c5040c2fa95ec8b3e9406d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158481 Malicious code in lookingan-nalako69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5584719c584b5346c47fdc1fbfe9d217d2b84c96f94052622c498793979714e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-kkiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d552f573d1d2991c2e846f3f1705a3559d81b013a988d345d2e1e03c0f3451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe93576e307e1d02824e5846cf94db29b2ade50d946e937f59c079c5a0c4d3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b135c4ec292fe6301f46d78ece14fd2d1d16a6bafc2ccc173260322d606f9f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d13b872f90ce9c98f9fec67b353fd81e93b92719edb71c30987bddf53b9241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f238a090e09c19d6036219bba0b19864d70e4507225b0dbd7e0b7aefaff07ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f2577669cd158adc95d4ba49cc8d76547208e7d11844fed48590a220d2088e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb49a99078bffe42f4fb5b8af2de586e9b63533edea807fac2ee1ab8ba111d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...