MAL-2025-152487 Malicious code in alvira-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e24c9db06edfa14f092adb6c47d96c641de22b0d99ae99999d75e43c022a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155671 Malicious code in hariyono-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd26623083d93013c37d9650bd3dda4e5e429c6a19794e77ca80feb24ef7d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151199 Malicious code in aben-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6269bded82bfc667a68e7bd80ee94dd69b3f4f461e1e69cc8b01bbd6dd48c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150928 Malicious code in @miptaa02/ryua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb3c22bf51dc614dfdf04656b4641306f2828ece12e3149803215936b72b1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160190 Malicious code in masioaluan-ofa-batoila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a80f286f5197aff2a05c763277f44e9af7fc237a56e1284f646e8c96b54fe06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab876f8b4e96e5fe8d52779845a9580ddb3deba547091ef39c77d37114e30f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e438d23af5ea0a765e65458f7164a9ec5a845b588f4d03b7fe874ca62f5479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaisaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763cee8ad1902d72a35fe49556c622a17967c27a834c4850a161355ad50b8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30789041c452c967ff6f4e1207759bd0c58793d8e46237464b5bbbe3ec9853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a47700c34aefab9ad1704826fa4c76bf2196fecf69c96a4890219876a1b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09f22ad0489bed30f7832afb06ffb5ccbe7cdf0f3617d0c1fc864b19da3eea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9db22264a09efccd0102890cf21eb664b3434ef96317c7c587363cd1ef8711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c40d13c905a5c7492690a25e3f86f827ae5e00e91cb9323c51902d7c5b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/scseh-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5fe4529b958763dfa618e1250e6c65ea053c25555882e67c812f1b5c14d969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3987159359f47ab6e508c2a85ffdd1eb20067a9d5b4079eb5c014168506764d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164301 Malicious code in pitra-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4d3a0d5e55dd3d8bf81c11b448334dc264d48a3c2b64bf574049e6209a943a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154004 Malicious code in cara-bsunssns-jsausnsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f821b16f81efe886ba1a9528fb7560d7eed3590ea8c7b8adad9fd3c0aa1226e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152637 Malicious code in analusia-akifalui-asulaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dedfc6e558852166ebfaff1f148ae226b58f0fcea99fe5d22fa6a541dcfa2707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150074 Malicious code in @mipta1/iynug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bcb4b114eecea22402941841fc841a50d42500a6ef24fdf45fbb830513ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150564 Malicious code in @miptaa02/dffdds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2581abc6d7e4362982adfc288424576f7caa58d2ea6b9eeeb512126f9e9ca445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...