MAL-2025-166977 Malicious code in teagood-lokina15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0125b0d06fc7e69298fe2b73b0322c342961743894f5c64cda6f1280c6eb36f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167162 Malicious code in teagood-manaki92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de01da0008f891850731672df906c328ded56c3967494eac214eecaf287c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157807 Malicious code in kuinsu-uiu-vinalaiumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031bdd9d14b69158960517ff826ecafb5b67baf5ee474e45e4ceb2fbbe63a1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161899 Malicious code in nasrul-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c6e05f7abd8b72ad42352ad4d5e6c4a855eaf81f0e58b958919168f6d5ce13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159183 Malicious code in makan-aiga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d9eece50d9b3583d4157cdd1e3f27d8c641b57a4a9d01a2c08b1d5af4f08b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166603 Malicious code in syahlan-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511b376caf5e363bc753ab1ffef51af9b11f43ae4cb77c1005cbb193088db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155367 Malicious code in guras-asia-bangko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809939b483ef1d299d67ab9b6abd09abfd1c74834ddb7c108da5f5409d4f8047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151888 Malicious code in aiboa-molpe-amuasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242ba9db2a4e8865fc8502650d6406a49d3f5c88d9d7f535a66982b1e1bc3de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wavt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32180869124e762e7edfacaac8ad405b14158ac4468aaf288fdc0567f92e2bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c686dc69188c9e3b6c9bf25e102aa42199627bfca13a7c1e7ff8aeb8b56898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2f0dde708b97e0da4630347c71c5948f7296ad252be111e1e0e2bf36a88d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0e13a1e7953076645d78566de32b8451fb626e60e5a532481bf914cb7446a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-luak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f09c42c12bca600d1b25d768556216192215818da13c9906647e2f3a0669dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/aju1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dff16be6473813c4d223a0e15fb0aafe9132e3f6e589d898193759748e243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ead33b3b7501a651395f992b10c77febddf2e8b3d31e47a17f5e8553e1094eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3270b512f57e1f03a79d94e1fa073bc2e80a4c2583ee3fb72ef70ac86e1e2371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02b2fa9aab585b4fc1f75713bf7c9570f8113c1c0c08137ce63dd6f79cecbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-tower-toward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e2e2a76d770a8eda19e1dc2b0c4c25a77cc2e749abbee92b4dc03b57b39025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uuki-vilakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7ecd47275d3002a1abae4949852db4ebee53c91566d1816eb5d5f6b03b4735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fdd49fb1353f67ef4efffef230a679b6eea11ec13ee1f0d5a6e7508eeb1e71b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...