MAL-2025-166840 Malicious code in teagood-cuekin72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e028b0f288fc2c8fff7a798343a47a28d0f7fec8182f17763559ff62a6a8efff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153795 Malicious code in bintang-tea45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d997d4005364b9f4c92a2fe1f98d1d491303866d09ef65bcd04712a6b66994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163119 Malicious code in nokire-namiresan64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c07c5b65f502769d2620f3e9ba4124601636f411ebc05caf9d64343146806b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nuys-nabsfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05661e134227da33694d86905402d15c2dee8ced9724e57d15013ba2258d7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47112611f1979abcddc993c6698ff847b757a067d03d68bffe2f08a1ea7320f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avoah-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3055897e973a49e7cc6b5ae665d5a665721cf302fe2fb2bab2d0805a5b880c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af866287ac2cf9ccf2254003cb1119d674ee42ae79c8134c65326669ead4c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-nosdfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd889dc87889a3c499d58c7754f19ef992fe9df39c39f48007585ad60f3e9520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avin-aumaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6800820c55ac54432d4abbf65e5b2bf5d5597d0bec3ad553666998c41b2fc654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-itue-miga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1653e4aa6a1c14a6fc5efa883f4bbd9163e5454238ffc6c01f4807d0f08fc71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jianamgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597cbb60088ecf52427e30e22f189692ac46790fc5ac75cffc36237c35f7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-zas-dsfaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a1dbdeefc1ecd7bf6cb943b24d0a31c9cdd678e56de6617a066edd911e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5022eb7d369f30e0141efb479edecb2ab5463c77778b3852dfa1260667a43ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a957f5676413dd5fa6e9a1c7b0a4abdf8b3177979e9fc2683d47289a07d7fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7cbf11e7481113c44b8ede2c089f952845444e912ecf8c5c21881301e02160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-dsta-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a583f395a97ac471328357c6e595406f8c562b7de5eefae83317339e8aa78e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-sab-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d44733b8d032e887e5e0a14d0205fd80c3dc60921c3c5ef544a8f1fb6a8b5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f470e5dbd060b4fc944531300733ea192d663dea5e20dbf320f24db79efa83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd89baa1be13c576ba5b530e285799ac8134924bb7b1665f0f27e342ecce242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb61e690cf0aedf80428408f898e1b5c03691ac4515b059f1ac14cef5c0e48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...