MAL-2025-163901 Malicious code in nustar-miuyu-nutyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781394f4441e224aef80d9354d5dd5d965204f1ab0ae7354ddf398f5d141d7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158117 Malicious code in lina-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f8b862a864411acc17f67b84224608dfd9cb83cbb182b6906417e036b73557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158436 Malicious code in lookingan-nalako28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5cc4e64b60992976ec0a51954e8a3b2609635505f5de7466105d3f681ca794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154338 Malicious code in dia-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f081bfff41ccf89ee951fafe636555c3e86c6c719cf6ace4ed90c41564145822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167999 Malicious code in teagood-yakuza41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d882f899c4976968f2f8a531ec459b918eca5487cd52d7bfe0e689bfa168f2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150880 Malicious code in @miptaa02/ofdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58721eaabb6907cf30d38997a654c86fd7652f808234560d748029d8332ee2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160315 Malicious code in messi-dyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf6561d91bbc51e0d7e3c16b97cce0dfcf60dbe8389245af8eb3cc3d0cdc424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157660 Malicious code in keyla-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a683227e835b2d61c169225ef6dd59ef2c78148b970b9725d2b5070d62aba85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5035bc4d86ce7cf833f7cffcc1f2fddf8136389932c2badc37dd13e5c32090e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97adcc0d5c03a98c1790d7ff5e147a34efe9238daed99b5b1e49abac0a6e6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnimas-ofisugogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97e287ab46b5271854926aa69d402b7bcc7024729f974539820d4616f6591e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulaizbknisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf0db7e5e005d3dba78565d3ad86bfa8b33445476fca33c2fa516e744166d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4aae805180cbe28341f6cf24d16ef88f09e5a404725f9bcadd3417401e21ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbf05c5cfad396a8ab230f6587b63401fd21821cc0c5b5208add0f5ba394f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afi-famauaofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539ea588660682f5debe80fe402d9be623131edbad79d5103fd7596c2b4d05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-kamali-bicupaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53951c01b80a936f29b79883dd25b209621c71ab43d8a1d7978ca95438bb3e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babe48fcefc989db5d5bead361044609698799c441bffe048b24a1fb23a0288f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/inila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bcf9708dcaab2020576b4667be0fb0a2c45d13fce12ac513a87f5a8cfd665a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-dulau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350fca2323d6e1a28d4b7662010cf438a45e211ff1e854c5147323bd93cf5b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b6865b2a63696e95762bf9c786319a43ff86031520a5e69dd73b9d60f9413f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...