MAL-2025-150627 Malicious code in @miptaa02/fggkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b5ce8a18a336e7e638472f2477e8d822331c12cc07b86d764c8b7c51f36cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154026 Malicious code in carv-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f5efb54dffe3e8093211f6623f4e521fa3a1e350723479eef0780fd6b86ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soraidaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e587106a1587ccd0c381ffa5a47e63367b01724b69e068ab978f1dde2c36729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monadi-nads-kaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1119d566b3e8634830a3dd174152c4c8af807bdce689b72c7dd5a49d4865c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161278 Malicious code in nabila-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710dbd8a246af9479e87d7c5dfb2ae8ef1ac95bc22e7a55bfec7714df659da27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153041 Malicious code in avminah-afagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee5edd9c629873fb94fb8b42deb2099f577b1679ebc212cb00770e988670558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-gan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153bf4eadd8b505e7149149c00446b7bf168f8fecfdb23fef449dc47b1e15a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154165 Malicious code in dajouka-faa-sa1sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c972dd560589a03209dbb562fbcb5a195ba83e08e34ee3c7061971020c657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163853 Malicious code in nudla-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898ccb3c946abef07be65c17fdde3faaaaafbb05bddf1c9a12faff3ea88e2973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168234 Malicious code in tealove-dana28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cb6f766d6b1a2728e9b641f1ee834a4c6ed237eab089f2374ca29bb79da899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ae25b9bc88f839160f304692f2b06162bb31500c0a9c69c836ceb53247e570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152764 Malicious code in arif-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9a059ef119eca1ab48f46e9b6b6357437ca7b94926f3aa3f1f156e1fe0b039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159197 Malicious code in makan-aigomoa-iutamafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c2a5acceb5441fc54cba624b9e557ecdb8ffdf0d7ae978936b8bda5df73e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158920 Malicious code in m-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f8f2f334e1ebb711ff2c33ef7339c3ef464638a9b748c97ed0f7e5ad88b56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fraas-ofafuaffau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a011cbc1bc9a6a3f14083ac231b4e586dfae624fbc2d1e536892a67bbea86885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-bakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2489a1181c9f37c6250e38b884e12fe14112ef740bed6d62646af1917481762b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164992 Malicious code in rival-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a53ba3ecadb935d8b46975475c9c67e1efea981a035d86532a2d7d77a7a541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-limikali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d915ecea11bae782b9b6a2ea5b0fad598059c1579c56ba8164f9386f337b693f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed7e009983f97dcb7747ae977a76b1d9a4c462dbdf077c888ac4e96059d3321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff84754d35939a9fc0b6f3a987a60a842bce5251eba6b037c4d09c05c0fe38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...