MAL-2025-167229 Malicious code in teagood-nakama62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772cad26423a85b4a26edf51211888d15543575499dca07046292f0944f674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166307 Malicious code in sunden-dibiuk-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7a82086abff41b4b807f54a2310c9fe5b81338332bfae860c01ad97c8be633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150297 Malicious code in @mipta1/tyuaddar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94216074f22f36e3b96686257e0fb301c2c0c6dd983a8f2cccd41c28833fae46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170287 Malicious code in verify-ain-aiusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5c79d5acfd72dec55702e5dd49d9b6a9e7e3ec31b02043e63433200a909e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164228 Malicious code in piluka-ali-ipibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cef7ced91e81cd99e5d0a15d0d7caa4745f6e1b546fbecee52fba5c15760f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153042 Malicious code in avminah-affa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de147e0d11c015473dd8b469a3fcf25e2fce4c07242023c84cf25cfa64117814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154005 Malicious code in cara-buniasn-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baef55f1ce9791c8d105183b2aee47652f96cb04eb99ca47c7199bd4f66fb13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157369 Malicious code in kamasada-nutsai-kadrffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d1378c6328415a4ae669b837378f6deb848bff70a810bda353e790bbc6ce9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152729 Malicious code in arif-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffecac563896e81d8eabf809aab1c54fb1f4cda0e7efab75d4aec284581ecef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154814 Malicious code in ewa-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b869e9301d5aa3e4262da9416cdb7d1d1b416fa0e304a76c82b31fdcc476b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156032 Malicious code in icha-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10baa66a2c7b0723052f7f44b80a18c6b1fc1a26cd3e6ecb956ee123187c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164013 Malicious code in parwo-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0808d4e2be4738c75a2dd269d13609eb09ac16a003b24767e21ca2f66b502dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pjpr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0794131e45a52ec290eb94a28f02802fde3e7a2163c28e19a4442de0f35d2bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudiffa-sayuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6727ab492d0f9f20d71db8781da31206a298bec3b96ed0c2e692afb00d127ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656ff065d61e9fe5d910e602bf17c4dd2c0d435cc2a21e02beb14e9c3f752ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fff66789385d79aa31df1d7d519581d1ef5e0c4601f5ba70d3a2ffc4ed6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutus-manis-nauatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf17e8a7fed622c3ab29a7640bddfa31e269ff308824660981df1d383b28535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notasr-ucsl-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283fdada84e07f5d3fda0b6911a79f2da96844bdd227ab52629919882e914e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2616104a2d616322af4fc0d59d43cb03cc7122ff540b7d69e41e9e207da6c67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223c0e9c77acb0408971de6202d42477ecacbe8047865651376027b46ce10eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...