MAL-2025-152318 Malicious code in alita-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc5224644ac5c4fd4438e9b44b5a7e222abd641cd9d540928f27e8cedbf97f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157534 Malicious code in kentung-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67303e3cba5a839d1af88dafa180b47a1fed90dc90e2fe0ddc43678cc7c7d378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161548 Malicious code in nabuf-otmbian-nuyidtad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af3c3dad560eb70a8ed8e8fc9aa5eb1b70decc22d089b82af07a7376afa4241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170598 Malicious code in yuda-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aea3a2de31dd035b1b361e1e81cf0e1fd37701820c9d85e94b444fd5431e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156305 Malicious code in ilop-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f837faf6f69dd3ed9263b3601dbf8e4176e4222ee25f63398d83d6261ce360ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150091 Malicious code in @mipta1/kdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857149791ab35e871ef16de5e82fce15ae83c8300a1e6de0230796b5a0888c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4ec2b31ba36680d7a5187c6f80907536e2665671c0c34ecf618cefa62c4d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153349 Malicious code in avminh-afais-fabfoggfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6295b9504a9bdacb187c24006d4995baf171844d7312eb399f995de9eb46ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7ab788ccf7d030377efde3f8521f58044ffb1bb267a963a64170e3ac045c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfafu-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24613ddd199978d7ed585cae37ca4dce975cc7d290a7abb10195ca5a523bad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiakpmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367517dce045cd2bc001c1c8af37c1b3c9ff2d73108541fad7cf2da15e6fe63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-ytu-busty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f0949cccbfd9028b00522de11d06b88470f5062d2d68fbc191a6aaffc3a374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-digfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ff2df968525f0ce0888261d4c483be536c59700c086e0b02a27ac2c0769bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009d2e521d39066eb508b466f6d05a1f6ad5574d66e0065ecb92554e4979b822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aisai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222ae743035d6f9b11b3e42d3795d9c7cb71dbdee9f887922c45bb52e8e9707b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b636df2a11be8b762fe1e0dad2aa33ab341aa3995e8c6b6d1cb4bb5cc2e637b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foa-jalifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266fb2b0bee828adf61ff10dd6cc9b76054621d5c1ce25d4bd6139009a3b1ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f407604196c295490f916b7e65fb049fffc3bbea5b402baebdfe1b1444796fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afigaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd559af2c5593ac55eef80a9fc7c1f0e966aac3fccd6d802e1821be0c675de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150991 Malicious code in @miptaa02/tunn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02225443fcc85151b0a4cfac64cdd7de0bb2565f19b531750bc9f72056906be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...