MAL-2025-150315 Malicious code in @mipta1/yisadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9763636cd5a0f6eab7885ffa612f1dc4816d320f32436ea39d37a714794fb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150018 Malicious code in @mipta1/ewrausjfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a317a789772c3130aeb025f867a0b6f95f083155388b68a7715016fb37d4525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159821 Malicious code in mansila-tiafala-magololsaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d08f5d805d8b6df8147dd7ef054fa9a2692419ee6673b7f09d81f1b3961c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159028 Malicious code in mahnud-magu-goiaag0aim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afc1c7ce2624633c01d0377925efe9f9a7780cf0f6505f3bee1deaf85023a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154625 Malicious code in dian-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442d76e901acec667901b0d1c13eefc9e266de805ff706718cc7089ea8e61b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160067 Malicious code in manurung-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10421acf16619015bc867ab8d27fec06690b0b5643f0c4bc7e5c2edcee0b43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154083 Malicious code in cinta-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d43ba53882834b97dcabd6ae10ad8ff1b110f629784cea93d72a224899fc61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161585 Malicious code in nabuf-otoiman-igamoaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8e00bc3dddc93e3f4c6811426301d9e62802b088e296b96362547ed99d5a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinanaguhia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559aec7cf4fec915820da745e229b3ffd9a8acc3fe4b8aa87d17bbcd14faabd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8d7abf27768eb08813704f15d485c648ec027b4c35c7fade49e04febcc658d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-fofiori-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1c154a8cdb156e08482ccf45f70f29e16636fe41a887af0087fb64da1aa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobi-aymsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310496ffd99f159f1dec6aa95598092bea45c3b33a077b6e030bf3e1555658a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ec670c33f9e15722ecdc3fe6230ff001721348782ea865b678732e7f52d8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubuki-vianami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4225527c8041e720cfdd92cb62dd3d5d6b8b5fe0827ce0e79bbc5a7eefd7f512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0566ddd94c27cea50429b37e623227e246078b8efe031358496679ca556837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f9dcaf659c4f92c7fd73f123dd632cecd30660911a9e24bea92a1624e97cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e2db60432426d563f7b18dfdfbccbcd207bf6f22f3dd5a7aec6d3ff97d568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca203f21481a7b19ac00511f8a796cd2a1b7ab58f684dd930c38f1d56b8c703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d753304d6292f59cfdcf26fe6671134c9e5579915bb4072f8016415b133010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...