MAL-2025-168151 Malicious code in tealove-boy43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387f28898ac3c06dfc0c9d3ef721f405d59984974428930154c997a47936fd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151410 Malicious code in abina-amugyumi-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbece1c8bef7e996febb21c4ea67e915b4d8fcb4e4b31cd572f12ba1887375e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153413 Malicious code in avminh-afgi-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984eb7e3d5681d34f533c8a12c16ece60fe23d60d6ffce6f5c269a0bc48d079b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158607 Malicious code in lookingan-namakiki91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7cbf11e7481113c44b8ede2c089f952845444e912ecf8c5c21881301e02160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150670 Malicious code in @miptaa02/fsgkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea0c986c79ea6e0db1c81648a887318dd4eb9d50d684a7b86986dea869cd474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62ae286d7808fd8d4ad807c7cf84f461602df9b462dcde599bf8ac912ea113e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf76116487af3c3d2a2fff74573a6e952a20f36e69fc5f81b0e5bb8ca0e1762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163288 Malicious code in nokire-nanali35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5141c4376e13747686a5399b8a4dc1c53aa3f5529c29b3347969af9ba0e7faff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kil-aki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997c1863d981aa929722da9b92a25d3ff44d4ba2fe0a879474bf9cee8fbe7741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-klp-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93235cd50504672a0352a98662f0743508e6a86972c593091c4069e17e5c8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nibli-luykia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ff9200868993552cdffe65c46dd1d6d840e5151c010be2c6eae205cb620da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falaskd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cafb610b1140b26d7b72894d8c16685be458af7f38aee6358bec8a00b81a028b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavil-maasdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c583276cf43a0f592d9e0e5c26cbb3e6e9ab9c3e3a7617ae110d5c4ecb4c768d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotumafa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4df4a5edc09b338cd07a2a42fd30568918b35f1cfd378a8e840677a00907b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5cd5ff060a97efaa2faba6d3b89b963fcd3c4dd868d3bbe4066439de6f4e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-assssin-muanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd820a46e6ab146a004d83418c9f5d93bf372279b318b5a9515cde0452ec455e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f93aa6ae25235e2aac03c92b878b9c15296abb231c79555a2f25603f6fa4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e2ee39c1e23b437b629d821ea39ebea73109fd55069b2009ca236a5924aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-tecnls-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd8d3dc28167185130214123feebf34ab5dde10ae4407ea3108f852c88d1fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701d01b3de94c6c7fef2f94754583dcbfbf002135ba1a2e4f0d52114bce32c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...