MAL-2025-160565 Malicious code in mirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c534b9f9fcd038cd21e2a77eecb8fc104f8ab26fd0df8cbffa2232bd4be7cdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160395 Malicious code in messi-urt-efduds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8a449ee822a9d43ef7d2ad18a3b790a5307433f1b3fdd60ad6ae16c4eb8467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161576 Malicious code in nabuf-otogamian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87edad86a024cfbcfd294d9c65783a7c10028d0c620e0c1bab3478fd612a6ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154377 Malicious code in diago-kamoi-liumaakoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b18e336a194c199d7b70b647c13cb5e9897e1ed1f76acf0a91de68a300fdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0bcd01c87e711e9bca57585e5a48a115dba3355a7340dfb9779b11d8c58fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167511 Malicious code in teagood-nalikoli103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc4d9414709459e2417d0723c3cb3a98da69788c7b9e11c272ca7a5e79a0f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154478 Malicious code in diago-kulio-luookafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2284c331837f437d905afc59bb18ef5aa1a5c8640cd12fd0d54ec45c42b60924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165947 Malicious code in siregar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e4002c7cba14a46eb049071605169f76b410060aa2f003474a7f3f61a7da65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc60c78bc5b784d538ceeab38a6958fb670069050d3d87b2be09cbb58cd4df06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93ec593855118e68c1446b8f88ae36d5ed05a624e7212721786d6c0f120fcec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyago-dafaaiffuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338d5ac6267413e08fd88c59fcc14b793f31714fe91e1a6bf4f3ea8a34e30c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-grass-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005b82f71936058adb3c3890514f742eb6b0ee055f60dcf7b625096826475005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ae43210f5a99fe7a2867c1f96ec5e4446ed357262114050278b1e97435e7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27075a1817e73e6b05d6f1d5523415b0efdae5d7a9fa4ed690f9609d075e0da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvau-nalui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f85afb7952a99da862bef441868594e70d9f146498eae2935bab52357d40f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dajafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e45e4e06da30b6baad07f4e8a1e5a346567916adcea0d3bf8797a1cf614f5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f673b5edcf26fa1fd4a00551a6199d8e70775a9dad7f9837a9e9e052b2d6aa09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-sfd-ss3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6149f398396ff14fe931b9336396e0298a7610cc79f09ec7ec893fb015ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82597a0195b96150895c292c4e99607f11dddde03d976e1a2ab3160a653a6e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e7181f49688160802cf116f9c70affd7a2e45af2704355f4c4936c2466eedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...