MAL-2025-153836 Malicious code in bitha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592463ecee1429ea74cdf7d58be2dc0bc3616080e31008b139ab743e8d14560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafid-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78797c6c96330c72c21964cedcd7046e9d4e5487c9639e266e01cd3c6a2e173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159989 Malicious code in manud-nofty-muatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57972a37eec9415c9942b2c4971629cede47587efa7bfc588527334caa3d632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163734 Malicious code in nudela-afohgsihaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4b518776d344c967724a0e6b7769de659495169845e9a0705526f09453d484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8487d37ee65e0503f7c87434c303c4c2e88b07102d4a123b088206a4d7e597fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e9cbb9ad8714296028b1256992e40ca9f114afdd19a78bba9b5eb0b88852be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-assin-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b1b53bae90b0c3f5668f7c07ff1ec427ffb447dce56b9b44dc2c6a9c9dab59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-afgaafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebd1ef1863d5a5342a1ccbef93f4254d61db35496b3c02cf78696d3baa1fb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149971 Malicious code in @mipta1/azsaxfsix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a774be1791c70ea138a15f6f10e16b5f977b7fd518d5820eb185bc0dc8ad22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af81513b8b93e5ce73d308370b0e8f88e5b3cbdf30f2718b1f40afd74bcda07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f65020551dbe0f5ffdf91b2b3eaeb8612f42bb0d0f8447e2148395e23db4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152633 Malicious code in analusia-akfai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fee430d6e83ee61f2a7a29443dccca1b72252c907748a63256b1dabf2511b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dfb500b56a443a8349b5c0f0226bf119b523a904d2a24410f2bff1d58e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d96bac10b49d3ee888d6683bf3aa5cbde5c9dd083aa7470562cecbac510aedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ewrauja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f7f2c921e27ac43a1fb96cab7ac86f6971169e611e21c92684ad1e913065a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/arasho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e01790a76ee30c6bf898a3b0d456f25adc9f5f846bf03252fee10ef942844ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/hykg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9441bcd2970318dbfdb5465fb5ddb9b67a9d6ff6bfcd295e43d9c6d7a37fb53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mddds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17690f5c3811a6d6f990b5192516497897388698c91cb21a98a7704e5d675fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ssd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9e4d5e8de4eb620ddadd2d10658d943f9d00b335a6ee22e17e92b8cd9179b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159468 Malicious code in manadsi-sfdia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f39c50d98adf70ccdc3108add5745ef813913447fc83151ced1ee4ee9a43f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...