MAL-2025-168033 Malicious code in teagood-yakuza72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12447435e151fe8b959cc23d89b87ca7f9772926c71d31c41f86c017e0d30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169559 Malicious code in uaragifa-maraneu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e76c8107074223e92b3e8822f77c3441d550cf328223adbf1b45d25d27f548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162548 Malicious code in nokire-genji58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e023c639bef42698eab941967a208f5f322cf2cb08a4e49ee8f0343bc03e3b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155114 Malicious code in fitra-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acbd766cd870d0fd3e71a463cbd0e81495849de7cf34d9ac73f6d0f344a506e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154237 Malicious code in dajouka-tsfdaa-t6a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86af3bcec1d9300a8670d021916c495b8f67b4a986a2b91e325b0673fc449d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168516 Malicious code in tealove-nice37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d182efae64ebfa264e63e3944f204ba5004e673a44f76de10ba6477c0080887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166484 Malicious code in sunderlan-uyud-vamukalaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3d5b6eb265765cbca6e738c743db642bdcdccd1b4c5b87bc5883373efe2c41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154628 Malicious code in dian-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13cbeba60ac5d3ef38cf70120cee28c5965562c6446657e4322d9e9217862097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150730 Malicious code in @miptaa02/ijdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05804c1584a5f35ae0b8d77448630fb555771ea8135f312fd42332d85faf83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169918 Malicious code in uinsu-losit-dilaubaukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0a601d7a2e841f616cde265ee992fb75d5fa18df49f31a5c8ae7bb2e57a4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158169 Malicious code in lintang-tea12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade00cacfe224806bd0338c1a89ebb634ffb58e391cb72cb04b57b1ab21023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166561 Malicious code in syahlan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cd961ff834ff9d0fd41e54cda3dbbfb94dbe72db38447294b24063ac97f8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166463 Malicious code in sunderlan-uylud-vamkaunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683fbe15badcf0255eaa5d0d8453ac1ab6cd1631f56921ee8b0992f881262086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157452 Malicious code in kapvino-saa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a58a17ba251e8cc69213f65a958c1aba9c0eb01185a8149ca18912a48e88e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154221 Malicious code in dajouka-tfsddfcdd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35078afe41a8b23918e2ffddf09d5b6d783c2157b243f10f2c05cec7671f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164867 Malicious code in rinto-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d509072b5ac8cdf038a58774ac92ce2473e0a19bd1eaaef80d8681d7859d911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150749 Malicious code in @miptaa02/irasis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5f1743485d5aca2681719e761047d2e89fc4a1f9d9b205a93ea1d65b75fd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adifaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff2835746c914cca02563007230ccdc1690d3db2f149b0c35a2990600448b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160563 Malicious code in miracle-dokoi-unisakiaoaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59508dfdd579f304148210be6ca664b6e0f414f6e797a84d7db8bf0128c98553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bda38a7d25b8857e643a24e01d380a8a9f98f3b176dba2dee8f939911c113a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...