MAL-2025-150293 Malicious code in @mipta1/tyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d313664b07ab718c4effe676ae862a48f5f52d93e8cb2a4893155bfca998a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da405952c9d03bde83853cae73388fc0b4a1cf35b50edba5d2616c2fa6344d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169884 Malicious code in uinsu-losiat-dukilaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9123cad7eb134ba9e91879d5bc150fea874265333ab8e0697ccb37a4975bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vaklikanuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f104d7c4e43600922d6ca8074f9e772ad9f998171be168d37e43a83e0ac02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6e7348a03f45ecadab39ddbdbff14687ba962143c8221856f69d2eb265248e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152831 Malicious code in aril-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03c7acc3833f442f58727e489ca13cc61454f8209a7b7ae54c718e234ad49d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b348d730122e00dc6b39ebddd6f8e926d0912591d3c45d2623ddeea6fda003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153532 Malicious code in avomainah-fras-ofaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e6a55ca76431fbeccdf3f80815951073c69fc2840ff26768dce0838e9d14f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165415 Malicious code in sabua-muuyfafu-dafufufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5722c1f2beb993ca64b3c938a28d65d94cdd9d06d51398c6c521e81c9ca60a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5bbf119a74722040a410d7dcce14cb83a1d387868662002dfb08d71e945299a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167791 Malicious code in teagood-sukuna38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41bcd7948280916b16ed247e066f5729feafcffa521b0c1469f45f5fdced42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163752 Malicious code in nudela-fofaf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11dbf5e43de532f976e0c5b46cfb6ffc71850448d16e2a42b6f84f48e3dff29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157020 Malicious code in jeep-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a0264846e000479c61b69cd70e02c1e94da7c8eea99d5cc726ec5b1b30924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1527c2d2a8f225cabc23d484cbc3c7848f6f272a1c14d8326c929e5f9521ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd0d2902c8c3fe7944887f731b7012d234cced5fa4a2b7685d747e1269e1a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159878 Malicious code in mansila-toaila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca12ebe06cb36425d7f37aaafdd7eff5c1589f89e7e83f4ba697fc0e10f0b28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164958 Malicious code in rita-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70b75453db92294197f17654561086eabab38cbe28f4c12af5a0faec22a1cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063159677dd77a60ed3c35f0cbe6cf08a1b4c1187df42866d6a13b33c6299862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140784 Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-grunt-transport-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1983442e552e785211f2494e7a99bd6132c23f905079524cf38ed39132e26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...