MAL-2025-167988 Malicious code in teagood-yakuza30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fa58666d13c977aa93cabde83d8e6c2afaf3e0e1c52a8d50913db3e13eb647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156561 Malicious code in intan-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ffe0b01980b0c2422f21b8863636cd0865aa1d8f26fc8a8332351468053bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166206 Malicious code in suharta-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de047d962b5696e26bb066868c9fe8b0577849ff88efa3bffb72fc6f90d51afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149940 Malicious code in @mipta1/asax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3284130a211c69fe9835caf5e37c567492f6ead40338af0e7287f2707735645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159096 Malicious code in mahnud-nofty-gonisfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f05b62ac868c6449efb18d6f53c4743504bc318fdacfdb0e2023ac6b51ff19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167762 Malicious code in teagood-sukuna100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a93f7b2927759ccefabbc821533a761b164d543f208313cacb40efb6714131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158891 Malicious code in lookingan-namalaka76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4317ff26039dba2d726d3bf971ae58aa05913378a72815f91a963e0d07c60ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160030 Malicious code in manurung-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c6af0866d8eb561fe628f507123a4b6b772175438dda7481d19a80ca57e0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151916 Malicious code in aibona-moile-arom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd474deb61f50984268eea090d5ce8da4764043549e9ebd1f5a91db5e2d992ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165712 Malicious code in samehada-hzhs-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34e896a3d0732cbc8fff3abe8e6771960d3e65f8f8c850a709a81bf715da545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161269 Malicious code in nabila-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0599c5a3a09cd1b7c5163d730dd0061a57c1d5d265b1b496287ffaf6dd6ab878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulipo-luookafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ceca8a498ae3bf3da54bd028d732e5a9639f4edf536d4c73ccf961bec9f1c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162345 Malicious code in nokire-arhani33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff52e719f2ab2f3884ef0faf20a53c6bbc3fd34c591d35bbea683d581ea9b676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152842 Malicious code in aril-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4909e97a9b2ffb1fcfaaea7df09c6f7df2278e1b199278fc5d7ac88241cec4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169131 Malicious code in toyota-cir11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70cc6153ed690452e62ce90b2eb0c9b1c0539a5423a894b4b22ece7a0ad2116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masiolan-of-doiato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03dac3f3b52c03a0b98ee5a2f85dac3c84c41f4624cef56829f0e5d4c130c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148410 Malicious code in sure_prawn_chocolate-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502c42456a9adf739a7c0279677f494d3054de846c56377e8082c7a56824c035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-andromeda-ora-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...