MAL-2025-164089 Malicious code in pilau-akalu-kionpalaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec93e0a7108605aee97ec0003b1e15c3c532952b82314583cb2ba0464854f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158761 Malicious code in lookingan-namala49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee33b3f96edb94f52e37d543ad399c2b7a47abeb07427228d25c8d178852af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163053 Malicious code in nokire-nakala95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b617fbcd4831b12af94b5ee0771b60c3c992ef9644efa5641be57b4488b75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151166 Malicious code in aben-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d9046ce749c9ec2d96d07254b53464377aff564fffd6d90f13724e79615b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasd-as9as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf00ddd92bf410f41db4c0e66e72665f805f1ffdd93dd6b8b5909a8bbbf3c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/flagie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3756c9f3d41c0d791c8d382935a1ba08275c227146aebac6bd29a73b71eab2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tayic-alusakilibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47115b8c2c694bf752797bea9e128e253efb06574dd88cacf143ceb60b67b99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a8a9bb4c25928a500b41effcb8340c29a0ccd151c11bbb73e2e92817cc75d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7a14bc186a01ae13c48c618fc5db44b99f99064e64bf80b3f9a61d83f89b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3eeeee6f2e69581603ac3ca931619c87edecd4984a9530781bcfb17d8fc0859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dsfsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2e0e9d6bfbab2ed8c58f55169df71479fe53436d257a6beebeee90771a5d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofoayaff-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42716fc02baffde717a9c1df963b2ba2b962df899959bdd3d4ce9a57e29137cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be56acc511f4a0893ee760128912381ec2a6baf9fb743784eda197576147c495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b299eb041792d4565a375a55ff15b53c88021d167db4dc819712a7be809f629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/savdfhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f707c993fa6f6be4f3cdfe52bfd1ba6e7bc6b9fac5ab4be062cc62e383d4c6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-dofo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea3facd54021fb0c0e1d89797d3d91b9d705ba4e7b7a686e788ee9d759eace4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167855 Malicious code in teagood-sukuna96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49734b73ba0aef72fd0a091cee0f29e529a60d089ba04045327a31d7ccadb8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151333 Malicious code in abih-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95d5e8d8bddb29acd958d7dea5180edc4bdd80393a89e24d413fea5afbffc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162896 Malicious code in nokire-loklok42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d770045ab83049e59f5fa08704f7035f23693fc03a3bd62259eb2eeacbe7094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161453 Malicious code in nabuf-otimmn-afofsaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4207c6945a51979b37437999d8f7a7c7a07d53e4d33d6e573c09493d705507cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...