MAL-2025-150434 Malicious code in @mipta19/sceh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6f2d73223b08c4444fca5c6a80717fc55cb128efd7a2829c7925f456c1cf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159705 Malicious code in mans-matdu-hufmaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b0fad478514acc342696d060e6f0edc72206bd555017dd260e6d7c4ec9681a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155102 Malicious code in fitra-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fab0462695ab6adda6a02a591e83420c06e6e9418d2ec3c149d771805e884ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166473 Malicious code in sunderlan-uylud-vamuiusuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccb2d639b4d4bc10603b7e71ae51dc321d81970dc29185ee762e6733426d196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tddx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb5ed913977384f10198da258881474f4dbcbd6d2d244d015447b37ff6f497e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e7381843e596a405cf06f91d2e2fb0a8ecd8588a45672fe0a72b10603d75c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyau-tfadiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbfcbaa5237e95fb36805155ac244a838c1e17746bfffe9ce637081c2a07916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f967f06cdfccee239a43213b23d81c6535761c33366f0b52e29bab3e1ba858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pgfa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46ded209a9d3dd8893288c4b18098b671c11be1198f1070cbc9e6c8a92147c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89caceaba6e3a8cdb88be9c4ec46552f0b6a5fb22701de076e074a226bc55b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dxsfxfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c84f91cefc6c46c190b5d17a0972f3f9ffe21231c11e01bcf10227a5bcb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amibn-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdbdd4a5cced8c02a8b053c51878f039ee9f230004e1c2a36a958be7065da72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzimub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24daf3af81308bfd58c399af0faeae21684f0946c2d853241b735e2ec91f161c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-namauada-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19073c86d2c21ca886aa7222e0a8b40ba1803244c36e6e9e19819d37e08f136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimaku-umuaialakdaosoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e140db5d487173998a91548f6b905af4766564fb3b86837f929fb36a35cc416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-barasgewfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a4321fef40145f5846f6382949ee352f35ab5800fb97229ae5104a26b316b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baea9448b6738e22f288c18e72e1b5536b287dfa2580530e251762d563ccb16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cb16f289e9e2730a956db82d00701b7efe9c7403c751708e2dbc3abf0744fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uikayanabbaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8f9482de1203d9f6de6c515d721a675377db68f94b90281b8825e901c87d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-iopd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999331473f4ef1df711b2a01847db11fa73eb432e9ef32a12389e7e30549f50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...