MAL-2025-172633 Malicious code in @mipta1/esdsras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac5d78566a2584bca860e34775024486c14a65a86cef77acd75ed49bfac9a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176284 Malicious code in namada-kangasa0-nuy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b3bd2a80f6e8a5b928a230c1aa59484542aa9ba56f22822ae55ea93d32c11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178936 Malicious code in teagod-rich19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7282836ae8efc0001902115534a32bcefa2972a6667c25f3f9e762fe2332e48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179288 Malicious code in tusaya-s-sdesaasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bd046a579cf5d289e104ecc82e834bfd8e6cc8f721c76a72d0a3e59437647c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174672 Malicious code in hitachi-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d750371e10eab93e2226bf986af0f7f2c93ebbbec02b2b5e3a11da4d0411a882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178541 Malicious code in sahufarf-satid-farirataf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab98eac37e999565eedc0576d236db2c8cdbe4a81d3959f7b1c31b36b620be40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-uyte-budi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db64906fd56b1dae8e23f6d7d2e4edba9c8a932390ddb413794cbc12a97dc5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-fagofosaposa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3eb498251359ea806d2a76f2e4f4054ca50c1f84972340bbd0204436b3718c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-ogaggonai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f76c7cb841e97154258863364bca3d58ac190597ba31b4c76f90507a9004d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-ofoyagfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf4415794dca79c4314083d80550821caf8ef4a5852273488dbd96dc4daf62c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-ledang-pukakoiei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29eea13883b7b3bf85e1be915c668d0544b3754f44a80a871cd9e349aefe676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365d13677892f914f249d5c1ef2013d39204fe53fb0f84ee3e64557707caf74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auis-lepaod-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff189433bb129458817ec98d5083fe4f197aacfbcab4e211b6c31ee81ad5b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manuic-tamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5f56fb196ad2501a4aac5ce6b60927a69cbaf76cd06206ebe31d7e91630fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-ledonf-po (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6055d9d66592fe54d7d2d4ee189118ac42a2522094233c3b0ec71f249cd4e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pom9r-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad0dba0f28f4030cc0990a87ff553ca54b2d93ac316f1b91f2f6e1ce28c8f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-merahdd-pantek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500354369f13fcba6d216849c46ab37e18ac54a779cd8259e8ebee28919b3874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-me-pantekai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260b0d09bf73cd588ea6e080ddefe80162335e49b348999daef081ec1dbe77d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172422 Malicious code in heres-matinula-uinayamani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8dca26bc0ab2e6c847a52c16865333de4ad6ab93acfdc31a26e091bd51b921e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172363 Malicious code in hereis-mani-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de72de0019f637dc38a0fe62a75fcc5a44bbc05edbfd106f73ade138b136cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...