MAL-2025-169239 Malicious code in trevora-cir44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfdfa39c5c2dbdb9d5ce4abf4e9eabf77275cfcc177607183c192635b55a9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168875 Malicious code in technical-aln-tubuknanal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab55a1c38299c3b88d62313ef095168dbc1a9962b2996b1929f5579959779e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150555 Malicious code in @miptaa02/bvvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cde8bb52a0cf0bf82cee79240ccc1265b76cdd0640d0dc8a54d874da8d386f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150487 Malicious code in @miptaa02/aiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd60b6f6f851b9f6f18edaba70a95f0f3c1b78e15ad5c893bfbe1ad1b2a0dc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68687e6d618a103320be8791d6899ba7679b4e0505a3c43d2ac1fd657505266c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695fadb79d8130085692d77be4f12611d2cce4e89209a2578e84304375cff82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kil-akio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3c300d45577f1b8419451de9a2a54e99e53a71ce5a8d6f31977aca189cb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fia-jasfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe375ec1526848528e17578ad0243c596076a32855a7cae30788c4939115d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5727ce1c05575da526d6135f4c6b1c485e68ce3aceea15c114b834737fb3975f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae65027d94ec47df3abac2f5f53dcb67c79888bb9d28a6ecbad244325d9c131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-nasunnabaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf1c6bb742ca0295428f98c54076f64d4d45ef45472257ae701dc8babcf2155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-amud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c722a5f3caa10d2a238c64423a95b537acf5127ddf78c880eadd45929c569984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-ukuta-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea31090c55f3d61479fe19f1e4a19c34a6c4ccfc01a1dc22630bac1de15a97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-teaars-sadasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41059181745b0ba928335bf1dbd8494c48d5c868a69e77eb3488771f9b3c049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3926330cbf22e85f6ad60eb770fbed7c79f691eab442721a8af60b658477364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4272c0a09b03acc3da0c173bbe1443c73246e9f73d8f3467c8c9bd1571470a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4961359508ae7ce7fcc413a429d746fced621bee775a9038fab425b7f493a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92bb16e3e5bbdcb93f4d3c7ea39170c2610401253d6b90af3fa273d170fb925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162943 Malicious code in nokire-loklok85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc67fc86e256c7182df79fffb2f7eb3a4b8c623c615f1bd688f8b3292e5a6389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...