MAL-2025-152505 Malicious code in alvira-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aceb5f5ec14c3b49d44af98a42f176569056e229606f8068e1329e21e6a4549c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151535 Malicious code in abu-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b7aef0daf272597bb1076ec0607f22d844119e2ebf2cd8285d01af650b453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151320 Malicious code in abih-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e1f456dd357bb7cdd8bfc4a8f232dba1db354d96faed76154574f1739e18a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151734 Malicious code in aciyua-idugaat-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203274cebf05eb8fb29fff03ef5d89fb77c569df2dfcdde01ae342d2895410c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159012 Malicious code in mahnud-fuf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d74a51f9439f9123e427623f64982b26eb67c5ebe13c47d118af7ec40ee87bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c833f95586ea7251e138ac2d5eb3e2d744b7631ec0509c44ecc6e67cd974e3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169152 Malicious code in trevora-cir100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f0d2cb75b0d14a590f5989243a7a322278f340ec46fe156e96d91ad36297c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167408 Malicious code in teagood-nalikami133 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c091513f4b957819ad9314948eab6531e2f0316d4a21a5d64d84241561d0ae46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutai-kaed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a826b9d8ccb18c9afa91f9268f9c7f61e34277dd01ad8e78953959b80d7d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1b6b7d3b15d9736ecdf829744293fa4eb8b187953a5518e62c15e80c60d5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505f63e19bcffd98c6ef9babc671c72f6580bdbb79b08f84dbf8cc3a0dc1a9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0076db9d3dd22b1423c0830bdebeee64665e1f0e798eb7c74c6ee2a4066caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df5a7d305121e702e8ab75db490e2f7ac5a95acd0e244af7ece2c9f1a5f5e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-noatmai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f2e6ac4d9c0410e4186207aab1c3e9411076fe534f2a2507204262817fb278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150352 Malicious code in @mipta19/asisdssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1783219614069c28f8c72a17683c2ba5b1ecb9b6f6c52689a00dc0574aca7b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160777 Malicious code in muda-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d3f760ffb54d1ce1ea4605b522422a99e42b35dce0677fd5765ea5e9948024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166700 Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166681 Malicious code in tadashi-tssu-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad217cdadac539bf6f78f49b2f6a90122493aaac8ea61bf6a8d131bb1105879e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164837 Malicious code in rinto-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562e6555e764f9aae598c0caf3f6064f734dcd346b954c7905f7da7163b140ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154742 Malicious code in dioalgo-klp-akaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e6cbf748d4e86bf3dba842d43cdd29d7abe3ac338dfaf4c0bd93bc4a780a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...