MAL-2025-167134 Malicious code in teagood-manaki67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38aad554b5ecc1cbab80743d24e3f48397e6fcd518c627a36bb129180400bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152483 Malicious code in alvira-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f7c241a0ead8d3f55dc33765dc7d7fa67f94ba3564bd5311b647b565f0eee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156588 Malicious code in intan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391815ce122232fa9b451f7bd8dce168a324f19e7f76d8aadcf01671e945a7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164676 Malicious code in rino-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c4203bd3f1881f6dfe5e388f9ca02ce9f1cd2b7d5a21b1ef75d6e8b314d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-diewogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832bf95ce252369f1489749421897dc5bd83f4a7879af3be0f63dc2403156644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169186 Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159469 Malicious code in manadsi-sfdia-maraifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841f62bc5f283af916329e5033ce7fddfe420bebae64b69164df8fc1d66dd5d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162882 Malicious code in nokire-loklok3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8393bb7da5eb82509013a4555feb6f7836ec965f6a58c243d7ded25065d9d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150569 Malicious code in @miptaa02/dghg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69591662f491700c232f1eb7f409ec6378e1d48af0d58405bc86297c600064b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160077 Malicious code in manurung-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308fa127fda6fdebd723fa8102040976e6dd6e732ca10ac9ad45281668b9b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160028 Malicious code in manurung-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05f1c42bb7b8a4a1f875b8d6f24e0b0f366ed457b6e3bb268cab40716f9051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae01de260297db72842aee30b3115e34d20d2ef3fc9e7f71d07e6d601b3e0a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f1822c7f1e759574bfdad4613bc7733fd9bc47785eb50e4fa5a7bda7b1c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166321 Malicious code in sunden-dibuk-inukuilop1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c7137c39546a805c705707589438b76dd48cadef05558e40d19c2240b87a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169080 Malicious code in tehnah-codfd-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27ee16afe705e033f8d2462c9b90ca36ee861fd78772569d8f3ed700ff63acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6055efa33230fd60bc69ac7d424b451205ac364e5737aa829c449429f75b9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-otafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f753d450877a1b7559cef4480b0b856ded171a5cc297159b0b6fcaa175b50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155441 Malicious code in guras-nutra-munyatapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03bd16a965711c777b3cd9d859f824f8ba325b515a665c9387f29894ece5e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminasah-aiagiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1df1533be787b7c53551921f91be1b56cda17c762788bd06e4390831f9cd5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyu-tadiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbde7ce07682289f17b19a4c10cc8c82927723b5cd3e0e1fe51861628f21a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...