MAL-2025-150029 Malicious code in @mipta1/gfhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee2be25c15e3312222e0eb743f76a0807f707a1e68beb348562e06e4dfc0a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-anuhbuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39852fbb1ef14b5bba3ee9c6a221a4fcd92a306ebdb920aea1ec4c12ff82b9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ea7cdf226c10cab15f776fd8b786e1d8741185a527d1a2810f0a9859efdfe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udilsasak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cffa6e7c9ce7d604ea67afb5de02af37ef2bc65fd067bd52ee0ebbd86ab57341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157577 Malicious code in keyla-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf8703339a8182edf119e857b4efa9044c0611e39e186dca0c1177f743417a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/txifdjfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d015564ca461299ef9bcba78d9129c4abd59bfe7f2298a474bee4f80fcfebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167917 Malicious code in teagood-yakuna57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8438e2ad11af7277bd811802aa63fefe1fc52172883eee45e7c64781faae89a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160039 Malicious code in manurung-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90324f21129316c2a3bef6d366e01462875628a3a5fe0842d5d65319b25bb075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163499 Malicious code in nokire-zabuza12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdb12d19682df07fee3c110f3f1d695582766c6cc51b098ece5a1f5fc99327b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160201 Malicious code in masiolan-of-doibato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f64fae95ce275b645bc40956ee9cc20889e152dc4206440fc0ab0b883f43d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162907 Malicious code in nokire-loklok52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430e291b17b0deb6a10c7696d83874ffe6c598966f1760deff03865883dd0a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6d4b4e2318eb60c954f00d6a9371c73e0a6d667bf1c35d804d08b2ae5f6711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166487 Malicious code in sunderlan-uyud-vamukanmuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4b34d8cec03ceb63786a785dc9a86cacd8b1ff5222e26e64a8875900d44474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167763 Malicious code in teagood-sukuna11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d686e6d79156cec4cd7e604991df796c3bdba9aa1658fafe15b8e595568ff4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156936 Malicious code in ita-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c3ba31ceb97c2feebb3669628650377f004a7f9bdc1daa2106938d40d68bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee42e10c6f82f6432b63ae3e0c49b491d24426bca7d1f51ccb232e72be910b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24d253143268a8c8151420e04443b709332729ce87dc125b6f6111d11f17edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd862a45e486e4db00f71aa4c7c24a4a3780f5e3193437843d46a10e884b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946a7d9fc2c255713a469d5a96dc76d4b4d25170a9f14f518b66232c180a0cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93d81901c292cbcec78843ad8b166aba2e70458d547ce496ebc6fcc3757f16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...