MAL-2025-150901 Malicious code in @miptaa02/rassdasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5eef8632f09906fce790960af278af350ce5eea42a2c9ce9bf9655737394cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151699 Malicious code in aciaiaggu-idat-gda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e79276f387ce9e76ebd72bbefede4fcb12d98c4251473c647aeb02dae0857a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd227554ba9407681ffad34296718ae330718225f10c648b148b87d3e28b5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb4b53fab3b562b9ef6b2c4bf47cb7c233723c5dd879d4b591db2251d82868e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa98af2d7f0d7eac1f080e8ce6c9685c659ca992e68053a90d784afa70231e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisubutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3db96661bd8052961abb876c121890433b5ebea05f45d94b9f86d150a181537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mddds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17690f5c3811a6d6f990b5192516497897388698c91cb21a98a7704e5d675fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ewrauja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f7f2c921e27ac43a1fb96cab7ac86f6971169e611e21c92684ad1e913065a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e09c6dc0aed8d483e43fcbfaf7e09e5910487dfcec03b9a09012444f893aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1cb9eb611f96384d2692c6848f6a62d3b3b0e75ad382876a6e301fa08e07fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mdifafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89f86e84b6427a857ef8857f1464c90c590e45fa8a8838488197eebf1bf0985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8183ae94ba3659327e6d33b3240ebda3b9d88b27bfbe5b5b4e07d1ac2c56362f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecba93b6f7dca977a47980bb7f01cdeaa595a32ffd5f559db6d44fab5561ad92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c011a73a98537f8eb92762f524407d905a2d01ad136ea4ac013ca0097452babc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e207d919c84774059ffb00b1f14037fb9e573c9f2269cd759f4f8571f697d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f622c09565c07536d0fa3f499a320eab95ddcb61065ba04428b11229c2e5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dfb500b56a443a8349b5c0f0226bf119b523a904d2a24410f2bff1d58e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-uadania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ff1e844aad6cadd1020acc364f7b508dde3316531cb0a2c536fec0b0ae9134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fgob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12680415c25292eb2aeeb80f67b51ed3de21eb896f56a28f9bc0599c8228fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fati-gootda-ayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb9fe2f25539c1b1e3d3634df8d5f6f14ccd4d143783abe4ec0e19db52d788a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...