MAL-2025-150809 Malicious code in @miptaa02/lkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d0eeea77cfc69c80131c387755fb30bf1f684a467a915e07e35de0626b768a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166548 Malicious code in syahlan-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b49a16bfe8a475f3f1a02c4e76a81a8df7d14de8d5df43bad7ac6d9380cc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166178 Malicious code in suharta-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e170b39c604b540827e9352242ad03d69f906527443de704ad2b10b74d61ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163852 Malicious code in nudla-ofogiar-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4c142d99b4a6f5edca8706a95c79a85da48c13f837681f36c559109ef89b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-sabi-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681a6de01a0d65ebe693ae30cb977cae00973929545a32570d7ca4777e0ac367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b33f6d67d7bc0a181c06d34a5f4bd297240feb8f5e5339ac82f7578bcab978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhyu-tanadafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8093f7bf7f63ce9883cb069bf4428d5e827cfcd5d98c0fdc220022bab8cc1640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ec095ea9f954d9a39f84ebcf2f9aa2542b3bbe61939e5eb053f92a8ac3abf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d072bda9770cfe40c39a920a3c227018b1c510c25df0077ba974396a5c6a574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b617fbcd4831b12af94b5ee0771b60c3c992ef9644efa5641be57b4488b75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-11-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3c0372ef3d7d7be9b07698f3f61ff3a4c7110f81d98025c91c473266804fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotauma-anaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823c44e7135caf1c3fec3f1fa8031dad5eff3258eccfcaa8fe6edec4eae489c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4847cf7b1be92aca385e5dc36905778199b17c940775f7fee7b861eb972bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429083709174780db94fb1ff8f9d3d3d7393adec19a1822e6e6b668917e87efa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamukaaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d283cda663a7cbd1924b2f27f1b9e9e7768fde0b8f252370ce8e52d55581ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa04eb3e6728887ef2dbd2529391eb495d5c35e4597b9bf07dec1add9593f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168997 Malicious code in tehah-miss-brew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6364e580110437bd7100fde088031eff414bb60eaf500f386dc6a38939cc3450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154207 Malicious code in dajouka-tafd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcddb14420d6064a229a4e831e8cb1c1e989d2064508fab4760606447f81d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156202 Malicious code in ilal-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0675635ec1983e3fe928e9b65d211e3e9e7a83c6ea5829304060b03512559ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...