MAL-2025-167083 Malicious code in teagood-manaki2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f567b9e9902b16e0c5fb328b348c0a85ee6c6b73b1ed24707d18e35d4511d2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4276b482b6c1d1bd6b28167388812ef047c9299d74d57e3ef70d396a82828101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatf-buat-buata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323e6e11d4f2e463de410fb32c333fc390652b6622e35d01e836cb4975f283bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb4dbd8329e7be1b9d0ff97317075868655b1667e142b78f854a3cceb025106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bbd384bfe5fb85c966796042b31fbf699566c736c1fd57d0f3437fddae21b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b1817122b987bbc1dc11a30c3e611b4a1a1e7c5a4e26f98d59bff713e96e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mawu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309ef10cf6c47fa85bb21a066ca1bd6d17b7ceebc686cd09a084dd82b49bf746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f7c0aa41c2c4f6649b38e5871863718f0a6a3d9f63a473316cdc3efa070263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuok-inukinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97283b4bf76e90b900209f392bdbc720afd770de960ef20182b18d0487e2f39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170451 Malicious code in verify-tact-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055dcaf61fa7df89bc9f23a96a1ab707d28e2edb3b97da5aa026f73a6f4a9910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167145 Malicious code in teagood-manaki77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee1a6bdbcdf84af057274809da2fdffae6c59fac85f13d9c9f414d2b48537b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167379 Malicious code in teagood-nalikami107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60e0c4dd12a441ee7bf7aca572fa16de0efe495a403928ce9225d76292b6c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153289 Malicious code in avminh-afaais-ifad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607bd3477f8c9e4b5183de250dd1fcff624445e9be340f1d233750295d478e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163658 Malicious code in nudalea-fofiari-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15ea7808169e80528933f76306d872d1f2159990731720ad99f998df8bcd891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156189 Malicious code in ilal-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d381cbb5f0fc5877ff8f5ad2b2dd85dee6b1f4e613185627a11ae3968a13266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160674 Malicious code in modirai-igno-jihfag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cae3da989c9f616743207467588b14ef300ea5c079ab78bb59715bf9f35801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168205 Malicious code in tealove-coki47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4174962cc956698861aeca8358fd6ada2aaeb44d185cba7d5565f75c5842dbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165952 Malicious code in siregar-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb0e302963decb0dc388589a6e39526e9092fbfdaadaaf68f5ebc854df74c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155805 Malicious code in huda-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3459c8812ac2e7d06c3fd03da803aca397da025186936d3d22ae9b9492a73fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169542 Malicious code in uaragifa-ma-sfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ce72cb833aa70a4e533f84cddf331ff853fc05a8443952a6c3f25cab5f7eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...