MAL-2025-152472 Malicious code in alvira-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd4ab0a93029666775833b61f3d081172dc039d4573684c846e9aa6feb6a8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-gaopoig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfc4288adaa78c42f5c12d16e5c3913305afb02f98d2248172dec91b12416c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150483 Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yisaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed91f32ffa1a9c64b7a7df3ec039e9fe8637a76ef322e09bd2e9231ab0a6ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155888 Malicious code in ican-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba5e6bc2940cf0bfb98ab476856c303351e0381a6943a1444e0064aa48a279f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157830 Malicious code in kuinsu-ukiu-vilkuakmaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d913701a3c2b6a98a233221f4f6eb501a792471cfff19c114e7aad297f922762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e632fec6a2d168ef5510c92694ffe31acc1d07d194f56732974be84304e018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fgob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12680415c25292eb2aeeb80f67b51ed3de21eb896f56a28f9bc0599c8228fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155236 Malicious code in fitrok-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a74518bed0c212d5dfc2ae4eca65b7a5ab6c2fa3485344f242a7f370de5c525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150730 Malicious code in @miptaa02/ijdc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05804c1584a5f35ae0b8d77448630fb555771ea8135f312fd42332d85faf83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155290 Malicious code in gifa-ota-uauafdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39dc4e206f8c760992513e318679f0cecf09e38a6c498bf71a3942107ade9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dzffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509f2b5bae8b25e8557a1b3a9a177118df38fdf59b8f4c221f876639646742c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85179154a578fdb4e42afccb20153b6c701c5cc7b5c45fff992f13ac4a26d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuyilani-nikubamia-luyahuambi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e143e6e9b821e36eb27a7afb3de9c9a9a8cacaddb39f34dd9b75da4395f94644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151973 Malicious code in aibopuna-mobiple-amra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad741c9f9899bd75cb9b330ee1ea670c7b8f31a081a1ca5fb14a1fc9583be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9385cce81cd938ac5ac40dd42a9d1d1224afec900faa6e9dfd11a67ad8d1f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ee0742dc652f93735573498a9ddf8b9a7cda44ef6bf8ca9005833d1b4e7bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotama-jamanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fcdef83836d5f1b93550bb3176e025ee785b5df92c5f9d37964593f11a8142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169692 Malicious code in ucok-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02229458c17333f4a0de131d04e55467cba0bd528c184648ce9675d2f4a6e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163414 Malicious code in nokire-sekiya26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2cd0b63b646f570a3d2fad0e73bc963244f698eb8ca384b1c5695df5f577d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...