MAL-2025-150842 Malicious code in @miptaa02/miwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b052d72bdcb504a0e711b96d635c90c5e99b16f95797738856cdfa367cf99f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153002 Malicious code in avh-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bcbeb5eeac2a16e068b0de60de526fe8e3454784143027d41493cf0da8c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157160 Malicious code in jurss-gaasd-21s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c96ed44d89081964aa587616fdc30d4fa319ab72b88973dd45d6e53b12c4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158457 Malicious code in lookingan-nalako47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2df6e9cc3c784f56eb4df177072ca29f7ce08c22225a99a1a946498cc533745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165888 Malicious code in shilang-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd94d2a86c197a40bdd4d6ec4e4333985d5974d467863747b479ad93a8a99fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155831 Malicious code in huda-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ecdda2809b83c746bdfdc0d0104497c33716adff19908380478b0ff80d11a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161508 Malicious code in nabuf-otin-agogoasai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1711482f122626048081920adbabc656cf3e2962c2dc55ec6d6b1a0619889b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fati-gootda-ayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb9fe2f25539c1b1e3d3634df8d5f6f14ccd4d143783abe4ec0e19db52d788a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-musdaiop-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 355188e452a6ff19d517542f302b4ac5c41fe71be209e08d9b7e456de84c0a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88104b3806983e5cc19e7b1a134182cb1e2d733a27ef0448bca26a1eb234535c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3b1a5f9a8340ecde023fea4eac84a1bc21534a5b2d385ccdcc66453642842d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-milipe-apamumipa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb43fad64e2e5f5bbff016db7400174cb2a23a8682ba0389d0710da2bd0315c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-namadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa09411b3cc70decf5a022987ed6511a63f127eb98f35f371105e1c34341de81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd2d9d47dc4465ca73ddac8e3030eb3397a4a60b8f0a9e442972a891c2a72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419091f657114f8d55ef452d7f746fcdc2ebeaabf2ce109291e717fc8503d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e193a3e43b7951246b47c9c86c0bbaa161acfd37a26d1e39d45860cafef7023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829763e7e386add3da18de20d8120173e35bd93719e2f90c345fcb68c466d84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d31d89a23ee1df8a4ef136553ad5f9d89b266e54db0a9cdd36bb7f262828b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauhu-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283b40ea80b2ff4e7ead8d13cbd36fc77634600748a3e80cab6022c849bd8ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-gagag0f-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c627b448c28130a943ccc5305dc4e8e5011c1e489eedcc19825693e1670d209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...