MAL-2025-150578 Malicious code in @miptaa02/dzfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998f35b4b1c0fc862c9a748e6117125fe0a7aeb6c86b76bf77ed0981fb02c573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165971 Malicious code in siregar-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e704de676a1487b0e2ffcb55d5555d76486b29eeff8d74d732f631316e3a257b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159103 Malicious code in mahnud-nofty-muatigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58da6a51503c77f50a6e3b854fe1d56a39e94363fedc6ee660d805376102fa00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151096 Malicious code in abang-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4359bb788790ef1aa944506e5a5876bb3dd500aa5aab07f6d4c6754d978739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161825 Malicious code in namasae-naiuapa-mapotaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddd8b8d00162f65ed2dfcb951699de3947a6db5212f70370e927239b068a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164948 Malicious code in rita-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07836a91287f83e867ec13bb5a0e01c4bd9d33277f4970154f444fb8343222f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161428 Malicious code in nabuf-otginagaf-dofajuagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6f6dd50d071dbade7b6235bbbee1a1fc09dd45bd2754247ddbc526a9fdb4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167113 Malicious code in teagood-manaki47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d46e5304353d116e5bd314e66e6eb5339cb449c41c5403d058f8d01da9d5361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155427 Malicious code in guras-nutra-dasasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4ca17819467ec995cc1307a1e0b6a03571d36257d2f933be70baba3c8b2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164294 Malicious code in pitra-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef98580c86373d4144a6de5087dbe60765175fbcdc49115a96a7c123a8d573c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166292 Malicious code in sunden-diak-vamikaankualam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3d85eeaf742d7205b25b8b67a597a37f99955d8b09145ded99c03b0f9d25e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tila-mazola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8734e7a86372b91c99c2ce5bc6c6cad1d0efe2a47e27b94585f02189e3787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7f8e71bb6d9f563df1e4790ea3e2ee5133bfe5c4b4be3b235141675aef35a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d883a081b0762bfafbc09ed7f296c2f92059c0fd4718ab962572e176dc424849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f38b0a9e8dc1e764a240a728fb1d4bc5b7be038d4c8dc2c83c441399e3f00a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a639bf06f6ee23c110d4aa922ce9b727574fe48f1c2e2320944fa61ff84ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijjc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781a1c1e48bca70add675a0bf78e3a899ef182cbce9d9772bb7941a0321bd5fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7160e30cf8d02df03a591afd3505f732246bc44f4586cf1c171b35f6f19f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972d7a6c0351c2383e0a6b64bcf1428f41cf5e45263c83c69e8ca546921420ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b1fadd554c2146f6044907d2ee4b3b5f7a2c64856f5a70195b67ae6491f22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...