MAL-2025-167051 Malicious code in teagood-lokina82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627af25a02d771be667a7c38a9e6e0579bf6b9c6ab941246aca608a6df615aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169839 Malicious code in uinsu-list-patul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a146d119aaf5d3a3e5a09631827f32ea3479ae5b8180091a4530786aaeec6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164780 Malicious code in rinto-poke125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c2ea5dbb324df3584d29a1ba60f3e9fd44d3b76329f693b4c3a11e964ccf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuedda-rtaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07713a12cf77fe3ea27d1307fd7bd02922f2919d69f2f7735cfd01009ce39278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobali-januaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73a6bc992cd9a75e7f7fb7d0bf1f7c015eeb87ad1c8bebfd8618e3e17945061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9642ffccafdc9b4de1e05a95dcc518fe9f2d9510cec45a3bf22c42414ab806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532bfb26621d7810f331372311b1991dfbc66428059d27feb1ecd42d383d5288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b2f8635b0b1e170f789736b3639c56da2053b3f9dbd8ada12922b017fb1c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162753 Malicious code in nokire-korean3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb8f5fdeb07b16a22c1ad137a7182c5d1c8db347710190e3a0edc1d2ce29905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162220 Malicious code in nokire-akaza10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ed42aaa64567f3ebf4782c3cd1525d803cef2db1f1b50f5eaa3010b41b40b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154519 Malicious code in diago-kulpo-laksmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bd4b0c7174a72945bce52f12d4adae001364c060c2260a41397ebe4d8f5664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164543 Malicious code in prayoga-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500e4d4f007e9822116c8600f3e474fea487384df4702202b0b7ee3e691a6115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150022 Malicious code in @mipta1/ffsusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aa7ea91785ccbdb53d0f39fcedc3342f0a613fbe02be3eb5c93b75360bab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168741 Malicious code in tealoveness16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6d4226ed7338bd9846bce7bc03b9401ee1a4ae3b0015097a6c43a87357c2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kore39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806a45de54743c5afc10b11f875088edab198a85a61dd16cd6caab31372bc7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2355f6aefc6a26fdc36eec03a9e90e61039eafe37151708adc93252e73fb9110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-sufatiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17a6298b517027534fc4aafdcecd4dc6ae5680661c784fdfc26964f701c98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alin-tubuknanal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819bc5200c3a25a46f8bba95d63aa24c5a66763b2e399fac59630fbe8235ae59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e70f019bb0a2efe9adb5eeba8d48860863a6f0d1d6eee76ca59194ec32932a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197c054cdcb0883996fb2de94a97c1e447a898a4ace5a845d9d89d678a338efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...