MAL-2025-150159 Malicious code in @mipta1/miwsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327b5a07878b4693aeed6abcb61b28ee1e7d155cc94c65891aa7b1a87d662e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164250 Malicious code in piluka-kamali-bicuibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e6e7644913a99df45714c16164b3138c4e0aab9d725acab835085ddf6113f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analusia-akifai-auniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef401f678b9c73e9d6c1c512e3dd0b54e059ab8f11f55a0db42ec969544c8988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-21-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eda268c16ce89cb32ec3d7e75e3e59692b6b847a8e63d1ff8dcaccf7261b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a5494e6d9a0673ae12cb85b26c690069df29d25bce8326e8f62564c4ae5810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alasiasaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6b2ca3593afdc675467760668948c1ca4cff1520ed390e34eaf10b81acb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-gomuamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4365a420bd5239839a42c5de9fa9943d195f5ce1e158bb8dea2b7d8bbba3d029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agomido (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09929dbd738400734d3fc4a80f403e430c114ffeaea8101e77453e518f43a5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f41288741b796dd8505ebbb21f7f5e095f0476b5ab46da091f95a7647cda3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pgfa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46ded209a9d3dd8893288c4b18098b671c11be1198f1070cbc9e6c8a92147c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ad9a9246598e8c96766c8ea2bf68fb458823ba5621635a360a8897f7c34d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzimub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24daf3af81308bfd58c399af0faeae21684f0946c2d853241b735e2ec91f161c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c043f478434b04d74e0c6c96f42d5ac169ff9bf84a1cce6cb72f33f90b69ddce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a2322ba43b7f3fc1a424b1e2b8c6f8371af789882f7f43f1f6db9a4935bcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-suda-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cd98fb472bd22a6e91593bb00910a7a7ad2f8cc42ace31fe75472d37a6cf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aseszwasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0c5389e5a5ce2f85ba640336debe4b4a0d0d188800e636400065fb9e2a9994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodra-fuoa-janur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9177e2d251ccd02c826d4c9e5c6e71aa279b104183415dcad4fd9dc565c77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-lisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a03010579f7701606e5649ea2c9410e03764f39ce5ae787fb6f96a0db7681b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8dd85fb416f696654327028a8507a6450aecc2057af071a4d2ebe4a5758f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-auioaial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78a1096680d8a536dc5021b61cb1c3eb3b460ea7de669afeb4ec3337ce8e242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...