MAL-2025-150548 Malicious code in @miptaa02/ayab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec355182cd033c5f14b99ee395488578188354922d188b41b612e21a3049bb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163850 Malicious code in nudla-ofogi-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbde3deb769de68c85daf53f6a7f3130e27199de0549c19fa23b83af4d654f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152111 Malicious code in aji-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e869f4a7b899638ff24719c1c7cfff6b17c3045a679311c4ad950bb72cbae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161585 Malicious code in nabuf-otoiman-igamoaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8e00bc3dddc93e3f4c6811426301d9e62802b088e296b96362547ed99d5a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152322 Malicious code in alita-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1232661d0c4e39d9e827d005081ce27502c82d3ccf255eb5391283d128db1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoiman-igioao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066ada2f7118cb19e08caa39c843c6520567f1cdf5675d2329cba50eb831076b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-list-ptl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba38ef64ea5658e1260045dc8311cd4459556ae0937839f5267684fafa2b4e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a7404fb0c495360afc29dd52e1bf19cddacff26306a9bddc98f252b068fc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38ba3be31b82adaa73ec5ca9c2ce83d1308c04dae3469984474c61aac77209b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65551d27b127317b089632b1c3040ca295b4b08e1b2eb42e20546c49775e9522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-asras-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00438ad9fe55548dc4a977fdc3bad9f84535b599591208b0b12e0ad6428d49eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/htssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107611e4b2395a36a66c47074d5fbf3a7d4e3a35ffca6b8487ad796faed1f9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dokloi-ikauk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4536b10209e5b4315ccb145b25736918dd68e77a87d8ddcf02f768f89c27539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobiple-amaidkhora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a8bbf3e63361b8119ee15937c81d999c039830e9db6b18f4abb4e4a84b8cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-munitsat-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d668c820e90e52d9c7fb1948efc3fa09e27052b55a582a029758c9270f5e31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagis-ifadahigaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1ace4ce531c2587235731f2f65b643d901c2d8833973e586ec0e3bad635a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fodmafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be760e21720f01a36b5e12f89c86c5c7ffde31c48e45ef76766ed9f38b253f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sadt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8024c4fdfa57ddb89a1e1cf6da59e0fde1c6524eafc9e217411ceffc491ba538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe3c4633a7bd3bf09835100f371751030652b639635ae3a4f6c30619b2fa8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c8394105f1c0bbf1684622eb4b23b8ad842a0c4abc5bdfbeab8bd7c13d7b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...