MAL-2025-150064 Malicious code in @mipta1/isstdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05c2f41e677b3fa59ef13a509fc12d4d1fdb32b89455f20aaaa268f64e16b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61e2767e8450ba5bd633855594dd0ed957c779d6d4b0fe980f5e6e8923e9a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31dd4091f930aa60073222ee81983df2a6ba992fb733a3df58aa2fa801100cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501d6478f062e115850f048545857fa1e1d4b2a2902615c56d120d3ad9cf2092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00992ee8f9908e9a3a05f093d1a224eb297be4149c068eb6605da79dca0ec423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimdas-dafogafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af590a3963d5606e24903cc9e4c1cb5fbcb8f22cbd8923a5bfc74eca95ff5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8359fefddfe39daa01370660df2db0f52b7e9de7f1d7c0cedf6f34949e5822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149783cfb7cc60fcef7ff68e8dd68ae1d8b65d0d1ee27d74cec08a2471aa7978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b7e59bc6c788e4e93f4e832c177ac4cdb1641c27531771d430b2d1888181c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad669b6085a79e1ff2f9920d09cd7a0177fc3ce85c7f218ae13814f8e50a4848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58d3d9db2d956fbb34dc1e09603e2728901a84b73c2cf6fd11d4f56eb55b2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-afifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab8c71acb867eaff67cbc8ba35c08317c6253e42a2e821e7a9e007d8b93973e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milraoa-dasfudio-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b1f0393387d2dc0293d62d99bc2e39ce8063b04f7492ebe40a0a9cbc357b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150197 Malicious code in @mipta1/sadfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819268e4e4bb718b3009144e75aa7a9a423c651f097087d7c991245440c194fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152469 Malicious code in alvira-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd240b3ca9f653f3f8bea59211fddeb5b889b7d326d9af500fe1808d2513ca54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964e16f46416b1cedfe7240df501568bfbdf15b570d8474b82f353a1f299bb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153496 Malicious code in avomainah-fragagis-ogunafoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccea10d4a4903028dae0941c6e968c8fb54e6a18cf40ad2aa5284116cbe60d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164594 Malicious code in ramadan-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89415c85fd45b2589ac5201b1b509eab1739f268f1a4e7861b3cf68db420641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14440727387e5f1f6307159ff786ed181e3ae53d17d37565bb0e3893d6649894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169878 Malicious code in uinsu-losiat-disaivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40de1f6b3dee3a3610feb855f333f6aa958ba43dc0d9d9a60cd4bf68f0f1e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...