MAL-2025-166464 Malicious code in sunderlan-uylud-vamknakiunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba979b6218f54d84a24478198adce8a9faec748e25787c4ccf29cfc55d27bc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150368 Malicious code in @mipta19/g2enser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd786ff1a3e5ba06c97c5c855d9efe606d3c85500fa6b086d2d3d6a1112bf9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168668 Malicious code in tealove-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c142fad9764d0786906d9bafbe34daab4791f7b82094026be628ed2391c64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169775 Malicious code in uinsnu-lotipmi-kilr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5e97da9c7df24511bba803af050c292339c6206634198a49df2f9a0a88c28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c988e31dc4e97abcf1f3df98cee570d0d745ca6d726374b64239c173f8fdd15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanukakaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c16028a71587dd0bc32828d981fdf5bb23ba2975a55cfcdd37b76471e21967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24898d7046e79a85cd5910519c4ca4f24567b60198711654575a3516ab0590ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butssdya-sadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696921672463c32b2d3302781c10e53b7edeca9b79cd525a1641135a746da2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaior-daradeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436bce302578331b54cefc56e234500471862b276221bd195de4a89b7eeb244c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kore18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46ce997b666cb0e9b6874e83f5b34db28780a2cd91620885107a1b45162c6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miftaikyy/sdtfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad441c140bb877e1cd87fd685449260df85f0d8b11a89e3a2dc9ebdfe7dc4e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaisor-dari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f5a2c586ffa7d810279748cac586e0e46897fbe571d143d4a32237fd610745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152359 Malicious code in alita-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc60c78bc5b784d538ceeab38a6958fb670069050d3d87b2be09cbb58cd4df06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155741 Malicious code in hariyono-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581932ecd345281b5f7c5603f8d7c27eb993dfd8ed08c634aa1e46b8964c0624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161857 Malicious code in namase-namuda-badkaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913169a2b5672cd1a21b14e9c47c883f623c4e396b9b3d8779d471cab990e43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150644 Malicious code in @miptaa02/fhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba4145c5fadcd44a773d839ec72e3cb81a99ab01ce9a480fc825c4321460d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168055 Malicious code in teagood-yakuza92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3acf205a716e89847190757851ca4dd8235b0d7baa9190f7ff13efd433d83a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160022 Malicious code in manuk-nanai-ignu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd5ec3dea496345f01a30b723063332057811419c7b9e81c60ed6f288a5d342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156229 Malicious code in ilang-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8383b3bdbecd68e64616a4163195539973aa6646f6420c5fcf78cee79f8a99eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169494 Malicious code in uaragifa-aat-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d373baad5dd18485b8204709acaf2cbc8be028df0cdd14f8823d4afd264f1fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...