MAL-2025-151003 Malicious code in @miptaa02/waht (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017a64e536685a1ee7c63003446abf490ffb4f3ee8b26c226f6a7831d1b86854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168145 Malicious code in tealove-boy38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2431834ba1b125f65a9e5f58044a2bac1b0853c281928b580df3b5fed75db5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167905 Malicious code in teagood-yakuna46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5418b1eae4a1b755192d3aa29731520fd5a874e55adad23682bbba8223d25c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159464 Malicious code in manadsi-sfdada-mivafifdida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50975afc34e91f3e32556b722b03da23a23fef015b03eeb1e11f3c7cff7e8d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154617 Malicious code in dian-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe512300841e9d0a5fd82b9fe0164e6f71da2ffc75a665d4da920ecd1e5fa93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159652 Malicious code in manda-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a601506e383711586440e54fa6a2f0a2c568c49c5a1de45e4c167d2f1810e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162026 Malicious code in nasution-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da104221e36a93f06404c02f324f2f2d0cac8443fe0231d50b2068eb6c51eca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163170 Malicious code in nokire-nana19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fb67f371cc74c5f1c69cc495ccf7020e1ac6589a77f94144c66752ba3ae8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163289 Malicious code in nokire-nanali4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b3830a49eb1e319eaf7c2100837ab6bbaaf901b832cb1e542e5674768f6874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nasafdfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22393c673195eba2608a2fbfc1860ed8d02e9a11a8651724a1c7b7c22fb2e435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9895b7fb3302d754c54cfb6f7d33b3f6153ff9190bd6a6fb49cbf63d74085862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butrsui-muiko-mutyooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0792623affa23f58116447a54d31129110e3b2ede7f0fa3586bb207286b1bfa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661a9f3355588c018542622cb9fcd74d8744326f56d11b82900ea88083631cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagias-ifadagaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bbe27f4a757f4df1f446fa3ebccf41b8248111ba8f2510fb11c1a82d7927a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-daru-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3565127b40a654a6fad7ae5528906d2054549fbf15d0118d16b712173296da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae501a59c2943298987a0cb84608fa3dee73a4fea82efeab68f832085d1f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838cbe2cf53956585392a543af3943702f076f8051b8a28009064e01951c8c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dilakbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25201bcf2da638ef9b3d1aa75613a8b197709cf896a277c86449370951f47ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-araui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278618a73a8dd0d6d8e5afdf7ac3fa632200f9e3ff3cafafa2cdadc2c933981f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e4dd2d89701895f36ad17ab756a2809f9d37933207c4c45c82d3522688ac73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...