MAL-2025-160211 Malicious code in masioluan-ofamaini-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a648ab236d688fec627a39ddd6418c9bb1e4bab975bc558c5466d80f460524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alnbio-toli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f56bdeddb7651185fdefdc5b93a73df9f6cbb2e5560f14c8b702f1ec99fa40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasabalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64e056824211a0e17d3d2d272b45dc25d270dc04ba6ff54b67b17153ad82b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230344184f8e414cc7cecb109989c3ff76947724629aa233dc7b5be5e23d4e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tedda-tauas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa68019ec33d0d49cacc0d267dbf0fe46ca5c97c30b653889ea3000f8d803516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jefp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06500efef11c6a0f8ed21e821254f15fa73ca12f7f738cb84cfd1ed7f64afaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/flag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959f3482040c6678f404444bb570bfd63a4aa94071fba63981478c54d7ec13f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modira-fuhopia-janadur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259817ed9bcd5e32175dadd5d68cd775dc50e8477616531b15671f480580f6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f96c230dc61ce8b790e3b7e79ffa26378affd63e65153f3987098c7559ad30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e4421cbaca5ddd422b68fc3967371ec3a10f75f89a9180be21c2f2e1b9b27a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afagis-ifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d3985f3c430ac00c8a3cf229d12650efbe43fae9c770165880c63261a2dcc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayu-tatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be0491bd2ac93929b9fde0bb537c3479da0f7913331e9c12d205111c5f56b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150467 Malicious code in @mipta19/wjgu1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9a3ad7dea920e0d9ca2e72312af752b7ab1d1456717cd9c44d888529719812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153539 Malicious code in avomainah-fras-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0825ea9949aaed0b27e83b71a3c0eb18cd560bf4aa41ca271d98d77fe835e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoag0maa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b666e8209be2c52892d789f220cc28575c83a9c3c0e91455ecc2e7b2cb011b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647449e5010eea28023eefd6194050fb3885cfe8d350d59ccc2a8b9f76ff0a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-ups012uszgxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b590d233e675a1c73a9bc8e538e7b6674f8d39a3d7f94c36e2924b3aec56bf94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b985f991d3df3b7c667c16139a6bbb5e6754ac734f1f63dd30309482ef1ca27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uywu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c899a705138c6bdde90faff3fe9df314faa1b3131226298bf4fe503f71eba6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...