MAL-2025-151308 Malicious code in abibuna-mobiule-amamainiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 006c5b226405536b1ea7a654a7b858c8a958218a7e014bbe1b7d0ad8ca98a9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166821 Malicious code in teagood-cuekin54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bc5cb81121979707d64a0b32983345574d70eaf3c142a00326729f74bb5e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163973 Malicious code in parwo-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428d2aef945e838feef4b22572f144d733132fa2d7f4fe138acb9bc4cbf54564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169695 Malicious code in ucok-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b49a1c2ff4a407f2955bdd996b0c5daffc70e31021c86a8818fe67458dba4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151457 Malicious code in abiua-mobhani-ayumasnoomsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca3c036e09a7cd51556d7d15b2c1fb4033011d134822149ae7faa3592b26987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325f607a3e135befeec67e1866571721189757010500480fdfc5e2e563350eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5a43cc74e795558d9168f261897e8d4b4f19dec5fca2d6a5d31f4124633904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d882f899c4976968f2f8a531ec459b918eca5487cd52d7bfe0e689bfa168f2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bf2e8ca6672ac9d33e0348d3b770631ec5c7c3e624bca461a2dd74c9aab18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01027fe10b1392b8872defde3427be43b372a49f1c4aa05f87e53023f9f7d53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoamaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4178dc93056e9cfe33f1cd83634290b4c19f7b708dbb07dd614404a569738bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nanagai-ifgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46e9c601af3ac85a74cba895c61b6a7abbddf821e920a1fe4d15a0a22533f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragis-oguanafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41507c31d8ebd59b3ed6bb2267c342e49d847aa91b7302b33cd002a76751025f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nuyacdyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02b8574cfab37cea7b8090fc2b43ddddcd5b940177dc76de038d110352551253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cf76dbc9f52397c2d848d181b97fc535d10c8d73cd01e0e076ddd7eac9476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea58671f819ca75cbc500a288b609e18fe1576f92b03047e03eb686cdc42e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11908a85bddb468dcadf339969fab0e76a571883a83b9fa10f398fbd9519540c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ffusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7745fb5eb50bff7864242cfa52583b92a356d95b4e6aa78937f77c0d11fdd9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-dss-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7703f6b0f7081b382251fa8898dbe03622ea703f34691ff58180d7ab8b69baa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af78c42791a13ae87fb2458d271a74dab658088183a1a199722ae7eaea1eee0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...