MAL-2025-167212 Malicious code in teagood-nakama47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecdabd2c955caca5c3e5e61a3dd5e8def41064d3f9266a91cc569f3dad4eb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153695 Malicious code in billa-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf39a9430b8f13e3589f37579dda2c4534a21ba132b1a9c673aae2a63c3f10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164441 Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araoponabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05abdd841e1a12d4d19581d4efb94fe7371e0a19990432970109c6fd9e3d1ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-pok12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2908186ea6454f41666898f8901c40b0a3669515183894ec5c96ac324bd674a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331cb0298f2e9981c13d116baaf0117cbd2acc7d55c12846196d7c64a8209c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tla-mala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5099cf8c6722bed29c6cb56f6124ce85a2eccc22dc6a6e9eeb2968afe0d173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168251 Malicious code in tealove-dana43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9afbfc5f6231893497d2533d46c8036289219f31c794083594c72d44f0c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159877 Malicious code in mansila-toafvila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018589373a38f8c6f7a50bfc801c976cc448ef46a0631f6eb61f9b8deb37fdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150184 Malicious code in @mipta1/qwassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ad577539efa965c9097093769b6a3050f904259df80375a165f71c446c8d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a60cdeb026fe07f6c79c157649ac670247c4b3ba010aa610b4c931018319c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151744 Malicious code in aciyua-idust-daja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521943110ef0023333d4b90b2fe965db09c1529a89e93268e8461ba23f13153c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157152 Malicious code in jurss-dsaxdga-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73b0ca88f6704ca89d34d4305a3b4e73a3f467e9fe46f126fa714f04e322902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156164 Malicious code in ilal-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922ee1cff8e63caf6ec82fbe27c4f2d94afb5e8009cb96644ebf625f77100e3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161690 Malicious code in nabuf-otomian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b5bc616fefc273e784560a66e3bcef9893fde49ece17987b5b290ab71ae4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152945 Malicious code in astia-alabki-malolosiskaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69d23f1668caaa8f86d1859b3bc70acd1717a0c8b41c00a190ea39c373fb4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157246 Malicious code in kamasada-buyada-dania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca02e699e623a5748cdf640d5695796ac105055f7e3640c11170cebfab11456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c6650d4bc9f3fe350da347b0498c83e5a2ea97eeba0ca6ecd4d1be79897788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-rocket-nightwatch-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c1a7ce21f97d1a465c17c98b1da1fb0548bcc5ac605c81f2286030ac4390e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...