MAL-2025-166805 Malicious code in teagood-cuekin4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fde3a62a44829389d4b4c7bad48449f9307ae2f5ce41ce22c05b2e64a2ecfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165884 Malicious code in shilang-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de5a4767e519280122cc5f26f36fae1a0039f6a858ecc05c9c5f81f704f3c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155386 Malicious code in guras-asia-vietna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dabe0b3bda2c010422810f9a12829c5bca0a0cb1f1bd4f1c3caa22e1623b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150630 Malicious code in @miptaa02/fgie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e0edc54dcac309c348cad313d2dbbb86585dc3231d4a06f35d3eeb5baebcddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159991 Malicious code in manuffak-angabofi-gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e42ba9c48437e930a57e9589bacc6364745cc95ca7044ecd5e97846fedb2467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157936 Malicious code in lala-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca7a7e634fc63fd4bd57658c656a56df86630c29f30e407f45a4d3861d76a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161777 Malicious code in namadata-munaroha-munisfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0283b2462aab00d1a31852003808db96a3e6ce0d5d5bf2171d8d85686d673462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153670 Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170323 Malicious code in verify-aya-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe49e854047d1f9cc460fc59b51e74504c4704693d86d0cc424ac0abcc88f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153041 Malicious code in avminah-afagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee5edd9c629873fb94fb8b42deb2099f577b1679ebc212cb00770e988670558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163328 Malicious code in nokire-rara4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ef12e4a628af9b1b341c7422996025dc3264fdb51c21fd79640fdbb60de2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164818 Malicious code in rinto-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42430fb5bcb9297b28c940be76d2040cc87294ae73e8c5276f808ce471683c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169493 Malicious code in uaragia-mudiffa-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d18c7b13c109080d53443b621ae3285c530b286c10500f1741c7d90e7b26dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166647 Malicious code in syahmuda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32fcaa830d9f628881e49a10eaac287a95806d1ed8c226026f95ae0ba36f25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150315 Malicious code in @mipta1/yisadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9763636cd5a0f6eab7885ffa612f1dc4816d320f32436ea39d37a714794fb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159894 Malicious code in mansila-toaviala-madoibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d2f9411e0bc3880cd7ec26feaa22d7aaae7db93d1885e1600545b70685cac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153465 Malicious code in avoay-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94cd7146e2cc475388ffe4ae7478b1796969347b0f26ca8522701cb2b9efd90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-0-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f778cd48b870b32b99bf9511faccab77b1a825799b15377e6c84ec7033ab4a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ed4bbed0d32547138202edcdc477fef4e53d0e7d2eb19c758d057602f3f86b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cceaaeeccd163861edcd1622cfb8c741d34a6a5d61e0c1b00e7bb30662ded4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...