MAL-2025-161749 Malicious code in namada-kasito-nutro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469707a92f7f1415f2443981bbca6e84654c69b89ffd5a5ca48f53879bf235e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167014 Malicious code in teagood-lokina49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa667a9eb6dc37cd7248fd00765b6b75d82172a99a340582f2a5b8bc325cf7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154632 Malicious code in dian-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cbbfb96f3573bcce2879e6053e74d8d9eed441e9e08415e82a1c8345bbc92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150925 Malicious code in @miptaa02/rusem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d73ec9a30bbefd994379da9cea59e499532442c7e150d3b61b51cd5b1d4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156316 Malicious code in inagi-gvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8dfaa9e13485562114eee2d3f153bec3bb4b3814012c3aad88ab9932267df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150548 Malicious code in @miptaa02/ayab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec355182cd033c5f14b99ee395488578188354922d188b41b612e21a3049bb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155322 Malicious code in gifa-otau-umo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d967898c499a56420cef668d5d4ea3d311659b6ccc0b3fe2ae3b20ff64f38ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168789 Malicious code in tealoveness6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9b2a8474e6a6bc03d67ff86101ba642436401e2fccf31fdbf5dd6886124200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167870 Malicious code in teagood-yakuna14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a847936f560ef58748b9ec9c6420ad8e741cc5952f0df4da8e1eb735ba8b481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ylara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc78f645af1c5ac0f28d14021662e1c9d44a3ede40ad2234ef1e4ac20ba015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e7181f49688160802cf116f9c70affd7a2e45af2704355f4c4936c2466eedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a324c7a727e15526dcefcae8f9fe7915f6c353d3f39b9778c5cb466e149ccc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df27176e4154205d48707cf6d9102323d3f4797067042ba5a1d96f7f9092c14b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/etaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456faf6455c0cf8c25856679c212966ba8f647d4df9e459649f1cf0a9b2ea23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c630d9d2d38f1a0a46f18c3bd8afb048fe33d55d1168fa8f7621a783656a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d48b87cd48a18a9cc1631b40799b29c695da5c589f62c0e0e7711f0e6f1186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alufuai-ayuvba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea71c663ae1db1ec079c51a3597b98bee6543535c9c87e3a1276318dba93d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falakd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873ae6801c871b1750699e40aaf1674ee87203e7d8de166c31db6b6138882a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3296c93ae306fd15f4e097fdcd2a9b6e65890cd5c326501ea92842a759e3e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8831de39d79fb51f4fb0f5ba8418c9bb82e095eca76594ffb2fb846cf70927a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...