MAL-2025-149949 Malicious code in @mipta1/aseswar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2268af5020b4b99328e12b961cec6e81a22cbec9659b0e9057a2986d96286f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7966a9fa44453c615e2b4a36215616040258ccb80a01717beb3df89bf6bf5717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaka-kaiuabulbu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aba8dadbe59617cb98e34430aa7be39fdc2bd9495d1e8599cc001fa1ed77b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8342e7d50061c1b44de15366a8ea58bd5d2af89d39c15cf302836297a4f0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01dc6d6979f6d52dff99763495b4302bd457cbb928aac7cf0e46757534ab22b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbe8b086f23150cc254d5d1cf5de971c0048a5041449320e58c087f992c2f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunalanikab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540d9aa6bcff644181abe3520938ba03fdc2fcb7f42eadcb84850f3c9f3f159f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-nutradfudfaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e93a12b75585999709c7e2498878dfc07041b0cf96a9dd76d96537a20584f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d091fd061efc16a1a74a9e3061b2b7bbf1e53dae644f7b1a9c29430ffeb598e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f02ab7da63f5889f752cef7b7b74562df3711784538bd99b8b7dc2d9966949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ff4396a63cb285bcd0b848a63e178db17af12fecc1a1cae51059f5865ca1ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alasiasaokui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8cf83ca6fd9797bc160f05556c73e4234fd18a27305f422665844c7fca2bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162002 Malicious code in nasution-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3d99fce3a39194e8c1026b97ecf94a75597af507b9fafbee737d81e69b0558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170119 Malicious code in upa-lukzuli-ilzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1fafe653d9c8a9574bd0920c56b191087137eba181913727687333e48e6a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154065 Malicious code in cinta-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a32af647cf2d2dd5d00f23c076ba1e70b9dc8f31e3fea96ac2640e287ea97dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162767 Malicious code in nokire-lokcek15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf4cb4d12a32b466507bf6e3cf3331b55f73a521d0bc89648e4428e78f5e23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153133 Malicious code in avminah-fagimas-ofisugooagafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb81634debd98ee5ccb53dd1c8dc99f43a93e4dc3744255f5631b0e355bc8d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165788 Malicious code in sau-nakiio-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1064e4f5756187df74246aa401ce6f9d884efff7c6c10e157eafae6ab7d0cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163782 Malicious code in nudela-gagaghg0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f1046cc1d9243cd18add645ed68260f7b46196c43f608079dec908a80abda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167426 Malicious code in teagood-nalikami28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f724f8e8da98dc030a634caa9c77934604770a694cca93fbc7567f7475735980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...