MAL-2025-167255 Malicious code in teagood-nakama86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e837e48a674c4c5f89b8e23d34a50944d48444037d0506d79e917912786449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151199 Malicious code in aben-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6269bded82bfc667a68e7bd80ee94dd69b3f4f461e1e69cc8b01bbd6dd48c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160190 Malicious code in masioaluan-ofa-batoila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80f286f5197aff2a05c763277f44e9af7fc237a56e1284f646e8c96b54fe06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162795 Malicious code in nokire-lokcek40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9abb863fdeaaf03ccb27d319aacebfd6d49e113bd9bb836c7e825ed8ef5d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157736 Malicious code in kuinsu-lubuki-nasivanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee39d20496f6ba83ab1b67cfff64f4bfd919642f65c4f784808f856c0a6a267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a47700c34aefab9ad1704826fa4c76bf2196fecf69c96a4890219876a1b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30789041c452c967ff6f4e1207759bd0c58793d8e46237464b5bbbe3ec9853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaisaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763cee8ad1902d72a35fe49556c622a17967c27a834c4850a161355ad50b8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09f22ad0489bed30f7832afb06ffb5ccbe7cdf0f3617d0c1fc864b19da3eea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/scseh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5fe4529b958763dfa618e1250e6c65ea053c25555882e67c812f1b5c14d969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9db22264a09efccd0102890cf21eb664b3434ef96317c7c587363cd1ef8711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3987159359f47ab6e508c2a85ffdd1eb20067a9d5b4079eb5c014168506764d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c40d13c905a5c7492690a25e3f86f827ae5e00e91cb9323c51902d7c5b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e438d23af5ea0a765e65458f7164a9ec5a845b588f4d03b7fe874ca62f5479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164301 Malicious code in pitra-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4d3a0d5e55dd3d8bf81c11b448334dc264d48a3c2b64bf574049e6209a943a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157340 Malicious code in kamasada-nusta-budadant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ede0082004bbd30cbe934594255bd84fccaec272ca7d5bf9f66d14f98a17ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167025 Malicious code in teagood-lokina59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a1bcd0dc63038519bb91eb79803d62e1ab18f0f65863b9144a150346dbf4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152637 Malicious code in analusia-akifalui-asulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dedfc6e558852166ebfaff1f148ae226b58f0fcea99fe5d22fa6a541dcfa2707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab876f8b4e96e5fe8d52779845a9580ddb3deba547091ef39c77d37114e30f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166855 Malicious code in teagood-cuekin86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6731e5e1f0e5824660d25c03986de9d4069d41442d4f3ad37c98682600509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...