MAL-2025-167014 Malicious code in teagood-lokina49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa667a9eb6dc37cd7248fd00765b6b75d82172a99a340582f2a5b8bc325cf7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167870 Malicious code in teagood-yakuna14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a847936f560ef58748b9ec9c6420ad8e741cc5952f0df4da8e1eb735ba8b481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168789 Malicious code in tealoveness6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9b2a8474e6a6bc03d67ff86101ba642436401e2fccf31fdbf5dd6886124200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156316 Malicious code in inagi-gvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8dfaa9e13485562114eee2d3f153bec3bb4b3814012c3aad88ab9932267df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154632 Malicious code in dian-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cbbfb96f3573bcce2879e6053e74d8d9eed441e9e08415e82a1c8345bbc92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150925 Malicious code in @miptaa02/rusem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d73ec9a30bbefd994379da9cea59e499532442c7e150d3b61b51cd5b1d4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152306 Malicious code in alfiansyah-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6984958ced6eefa10e4b8c81ce7f53be6e473228462b360b616216a49582941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165781 Malicious code in sau-naki-upsidaluae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d79480f084ea2c15a5dce3df851713e6980ca092dbc95d9f671891f0a8ec29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161749 Malicious code in namada-kasito-nutro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469707a92f7f1415f2443981bbca6e84654c69b89ffd5a5ca48f53879bf235e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ylara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc78f645af1c5ac0f28d14021662e1c9d44a3ede40ad2234ef1e4ac20ba015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e7181f49688160802cf116f9c70affd7a2e45af2704355f4c4936c2466eedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a324c7a727e15526dcefcae8f9fe7915f6c353d3f39b9778c5cb466e149ccc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munya-mipta-asda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28cda40671579305ce0365455d04ee9c67faf20fb3c607f78cffc77de27a664b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alufuai-ayuvba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea71c663ae1db1ec079c51a3597b98bee6543535c9c87e3a1276318dba93d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falakd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873ae6801c871b1750699e40aaf1674ee87203e7d8de166c31db6b6138882a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3296c93ae306fd15f4e097fdcd2a9b6e65890cd5c326501ea92842a759e3e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8831de39d79fb51f4fb0f5ba8418c9bb82e095eca76594ffb2fb846cf70927a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufafyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1b6ac4cb25f3fb0c4088f0d922d997966bfa5d040ed9057b4087e7fbb84d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/hahaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319c81a3f0cfad247d12cfc1bd70cfb28e1f38be96aae73ec64401888da4b36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c64c8b40d6b61b2b235150da6bb96c837a4cb9e8ae0b518a46bc200e3e2985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...