MAL-2025-150686 Malicious code in @miptaa02/gfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25934ae8ebb54ce00e0222112852216c28eeb822b54dc35f0980dd430cd8063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160642 Malicious code in modirai-igiafo-jagagigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8870f0c8c9146f98f05283c1d1059ad39c81652a5ab378caf8805224ad8670d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152969 Malicious code in astia-alaki-malosiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ac64439a50d8440da730233bb70368768377953dfdaa03f0aff695f5515f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162291 Malicious code in nokire-akaza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33081e428b5171d224c4ec0b13b6e222037390e3df334c35ec36d3e0741a6338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152804 Malicious code in arif-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f71f1aac0ea150ef71bb8b209b8a4ed10264660615503f14a93481b35593302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161346 Malicious code in nabuf-oguof-dasgusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaa679f1aa22c0448bed16cf677cce268f1ec695e2eb545a24e290febee9085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158122 Malicious code in lina-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79ba5eadfb5f67a225ce166df30d855e3cfdab1edc8f08139a6573004285c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166039 Malicious code in slamet-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c472a364f8708d96f79fbd942c5cffa3b16d438c83d20f0af3f6cd1bdcf7d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150474 Malicious code in @miptaa02/aassai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c2c4eb93823d91682e1c72e7362f4847cbb079dec34a977f827ea19c1ae394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169715 Malicious code in uinsnu-lkumi-kunalab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c791a7b243f63aa95d47da08f2277a68abf86530cfb6932f43e1ed7eda6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164435 Malicious code in polymedr-minus-buipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8093417e3c6e7c6b39ffe13e2d6b68cc437f3e3f7dd62c77b4848368ae95afe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167384 Malicious code in teagood-nalikami111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076b734afbe9ef694d0d43704b25812a1d02d38d74b32a20c1cecc99c96ecfc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151230 Malicious code in abiba-alubai-ayata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6603d5df7c23acc17b15e2b807e5a0aa6a334e34d496e5bc16b5093112d73a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9c22ff81e77e698805918dd5f2721f4e72b1161a228174829625792c581eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mivaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4420ef530956c790b5e19614d560e39b5037bcb727479f0ae402f4aa809ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunde-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8070c6b8314aacefa699b02e78ba068a39610aebc957af734fa5b78991cca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c049b26c6cfe18cc64aaa8da7bdd8153f8e0c5f6c08aaa44ba2f7ecff3cd5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838a9cbcf0b15d988214952140cd041e2e407ad0c886631b70cbe140bead6496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-muidoda-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed39e73f2831a0609b4904a56d998c03197d8458ceded2b5749e05f39b62c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aded1f8cc9f8ad1b0ad29168e6cfe21a1218f02f8710705d67dbff97ac94c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...