MAL-2025-150032 Malicious code in @mipta1/gjjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5162a82fec82292342cda066c8dbde26c551e5f0032d955f7883b9a4e5a247d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159566 Malicious code in manapf-manta-nutria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b57038d0599e7fd2dc2624fadcaa0d1d6f66d0b3ea1b2138f9953ef79d7ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160153 Malicious code in masako-males-l (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50df86829b9808bb86afd9b4e43db7e570f899eece0e9ded771d3999f4ac944b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164441 Malicious code in polymedr-minus-buipenajara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebadc9e2924b32a42a9fb94214c86dcd8636cb385ebbae61dc3d32832cdc7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafaru-mus-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aee161944c567d052d052a765ecac63097c729e41f3dc035028d4c181c6ed2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a8a9bb4c25928a500b41effcb8340c29a0ccd151c11bbb73e2e92817cc75d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masiolan-ofani-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dbd70bcce3fa489cb04fec7f4d80fc2afc4d4f24d2a732efeb0fe6eaa2ec7ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6e9dbfde68f3917bce7ce2db51e99acd3ed47c95c614726c970984e416b132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c361498839cf29a00ccf24e5b3aa5e88d6864ecfbad513ad7f1b83b68279b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulikont-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f9e432fc546917fc1de7489501b9354eaefdb54ce62f7281256d86a910c2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe0cb6164e786dd3a5af9e62775d737a4c211054ae79eacc4b951f930cb1249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfda-muradaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2b6b9d9fd273040100f70f5ef4c6715bdf2c6464b5ff9f2be66b53a2a34665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990de35ee357135d32f70c34d0634b86de15a13c657ad67b47c5b94bbbb2458e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubuki-viakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc216ff70452bffba6583ce7e8c3f20d90660e1ee29446d51ea10eb2dfd03296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d8849a21dfec16651c294f221fc95be73ba17d100d5b7243f387e42cf7849f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7e59bc6c788e4e93f4e832c177ac4cdb1641c27531771d430b2d1888181c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af8989e322052798da1d25174b7b3b6ab333e30d7979cbbf79b2d12b2ff965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaais-figufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f602d230f8ecd9220369efc7fe72042ab296c3512eaa99218d8ce3b8a8cf01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f774a7d3691e6b64bd08a43ceb3ef1fb8ed188a1362b238519b77694ca58badb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13319880cae03296b3c5c8320aaf8e397ff0373a195c6c9f79632499d1d2506a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...