MAL-2025-150562 Malicious code in @miptaa02/denba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc357fecea85ed38951b7aa076b95aa699dc55bd6e4c57cf5e13a743e8a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149913 Malicious code in @miftaikyy/saddesa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad34efe030ecaf8af11670d6aeebb2818f7d08af9a8700bb38d7ab62e2757b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165391 Malicious code in sabua-muhuyu-tanafiadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f63f60306ae132f2cd0a5d2aaa319d8e0381505134caefd1f8496be369d725b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150964 Malicious code in @miptaa02/tdaaqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa305514514eafc4277ef3f90cfb04ea95f4e4242a3ca7b793a9409ea84cdbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9ba065579479e80605babb0de074d9f6ce469fab8ef26d337ed5c74a1705b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alonbio-tolami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a4d2311c5c34d325925ccf4b7dff9fd29e123317ba7b46827bee819be29233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3662ef81b97e181aa6d0ff8b6f7ba1f7dd6d71b6aca3b30e54ac60942ae044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3bec11dbcf510b4446a85973bd4ef1f5c0fa8266bba25df447ad8dae0aa5071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd862a45e486e4db00f71aa4c7c24a4a3780f5e3193437843d46a10e884b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a905942f4accd1f3baa1954a066aa93ec7ad8f9ebf91cd9297e384a20d736d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a282689fd839f988b785c9b3de7d3302c3099f8d19ddc8a92bd6d84756e019c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoamaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4178dc93056e9cfe33f1cd83634290b4c19f7b708dbb07dd614404a569738bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fsak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989f549707e525d508eb036f8ce54bacbea47b8c65bc578d6766ba039f126ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolamanaikui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8fe727da1c9926604c1b2a6d34cb4a96ce508b4bcad5e7451ed02da91f73d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudlea-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520ac79920e97280c2787a9aa12334274e7fa0e321dd0391894609359098d943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molope-asimaianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962d1b7c4af3300ee8df8f06dbca8f5a516be2385a458c0a82425b67f8ca5056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nai-iyulaiup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e202f0e3b28ad2892ae834090983a80ee3f49aa8f50d81045dc804e6f55cc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9442d336878a3ed8f938346ef15bb27afd5432886ef9201b718fb71003f1fead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ddfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256ba81a08313f41dca4a8b718525045d71c2aec4c89d54ed01bf694735a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mar-safufrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e3939ff6d64a8fb566a0d366138ae78564b9d20e85374247afc032ef21b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...