MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e4dd2d89701895f36ad17ab756a2809f9d37933207c4c45c82d3522688ac73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160920 Malicious code in munir-nautyt-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b194dc00761acf60f181f73eb8859a8adbe22355a161b4195d952ec4578cbf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfddd21e03fba1845160b0b9728efd05c69a9fcf9470240b649a5f2942b33bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151003 Malicious code in @miptaa02/waht (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017a64e536685a1ee7c63003446abf490ffb4f3ee8b26c226f6a7831d1b86854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foa-jalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb4a1ef636cbde329b6fde8f29434c888ca88c7ab46315ff93689c0ee087fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d516e6bbddc780bfdabd628a457b02526d0c0bb203311d3c9e43517287fc062e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166907 Malicious code in teagood-lokika42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c2b6c7f04f65716c9f3cb936474600d98176128fa718f4f0886edf5f7bb74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bb97b5f0e3c4d722d5b0418b070b72fb62915d76abd0576f26cef8014226f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e169020143720ac074c55a1a88ce9415322048fb839f52d2878d6e9d6f95107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mqhg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca38583daa1baf5164468b9b342771b047ad6f71ce8c352053412de8d931fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158791 Malicious code in lookingan-namala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcdda1d1d325c9942503b53e1d04e12e0fdbb039cf5e5ff6e665b1579ab2392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzi-ilmuzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e127b37af9b9ebd091b87e8fdd9cd0d151d3dc623f22ea6a342926334e74dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64492da2b18ec219bc86f02b1e1629fd0dd0ccc459806719f5a9d023fb50ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163524 Malicious code in nokire-zabuza35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0697e5b20317b40ba0db68be975992275586e2d2c2c7f5ca06c7eb5ee3b2c222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857beb4c00b238a20cff9917d1bc515b2014fe6cb8557955d1f3ef9a300a3858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f83c36d09358e79d33622af64da9dd6daf6820424e7fb19fc055eb32d4ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153803 Malicious code in bitha-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2118a02700f11ae5ae19b93c46d65ab2fa2124bab75b22bbae41165b40a4dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151848 Malicious code in aiboa-molipe-am (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc214eaed70af1e0338127fc3cdfe1a0d9cda571618e6da3a40265a013ed9815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-lunakina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f686adf947657a9de75475336ab907d273fd6f624712ddddd3c049a3affaf0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...