MAL-2025-150877 Malicious code in @miptaa02/nydfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7c6a9aa31d2bffc5590f1cadf2bdd453abb00a8da8eff2f64d2d0baf05d9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156084 Malicious code in icha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e327738ff8b8bdea849fb0c835cbf2c86f7660bf6584548cb9d105b5ea85f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165849 Malicious code in shilang-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d70d35c6c55c9586d81abd74c40990624f82fbd615cd8243ca31182af46e6d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158767 Malicious code in lookingan-namala54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59d19a9dee706abf8b51411fc8b0382caef85dce03374a57eed0b0fe37bc5294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169599 Malicious code in uarg-mithai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0684fba52be7f806592deafaa6697b90e992f15f08c20a4c4e08fac7e31fec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162087 Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154062 Malicious code in cinta-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a09aaa62a9c7cc34076e0a61f6ab2e18097411e52d55668753bad34c8e8cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167546 Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atukbmnma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3296431cd283e460fe5aa64b2d6298e06076423ddff9c594ea169a72e45a4463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-malas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845c294e5fc23ea7aac83dbc07e736f0566e17f452927e4617793c962648ee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454188a6c3bf63e07add569ecbdd750737d28298d532b71923fd509ee7e72238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277c1560c84c002e674f5c18fc39fec41dd8b835a90237beaa302ff937607556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec678701eb69cbffaa908965828783380cfeca935d3381ee3dfb0982771f5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatfa-buaat-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a61d5fb58c646607c00e9aedbc5bd8a4947adc89c034c5dde2d9c4a24f277f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13319880cae03296b3c5c8320aaf8e397ff0373a195c6c9f79632499d1d2506a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d65f1878abe15737a771767056877cb4c6d3fa38ada50d1fa958095833b1371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fjgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b23cb3ecaa5afbbce6cf47869bebaba495a8591cf01b6c51f24e1ec7348edc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4376c685bc88e4f38ee2a95c97dd547ae862af8aa3bf439c6c5410987c317cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a210161e35213f29a88c3c7284e059e88e3043a46a0c0860d264fa60876aeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/qwadxedda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848ee02587d5d4432cc0bd2ac613b7a955582e6c149497a5f656d9d37f708af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...