MAL-2025-160415 Malicious code in miftaiky-whistle-travel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9476bdf1d41990645e3e47a30261e22abed56593bdbcb17eecb7d89c04d7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159890 Malicious code in mansila-toaviala-madiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff42326cb953f70a6b37c1c1dbf592cee365039aecccaa929dde30f48d6eae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150785 Malicious code in @miptaa02/kii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0959beb6f8fa6d3bf3adb719d79ece4c3d465d821de5867bc0f2ceaf4d21bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150166 Malicious code in @mipta1/nhida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8529c92494ea971aad6653c19b801f9026ab88da1b4c546d913b2f7122c00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164864 Malicious code in rinto-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ec6fe20fe4b4664a0bb52a355b0e992bde9ed1c97754d57ae13997852ebd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158841 Malicious code in lookingan-namalaka30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2861283b509524712a834b159715912074a962171a410b8a8782e2c2459b81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ddfff54a575766e3e2eb0bb3597770c2b779992d15955d80a43894e5446d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed44cd286edec5d212afc6858a38784b3c524f5ec341b627b74b787df5d3458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64db71fbaa5022c53a7dae997706b4c47bc166ff3871d5c0edeb377a1637782a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asi-manuds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad29bf7ae26a22111daf00112bc698faea3324d756ab0edc68d338514923ca96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19b6d860bef6ddbdca7479e8c3803d15f8b31c2ab5bce00eb2ae422627acbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akiualabnnuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7539f98dedd8d893d5474a08db19e0d9cedde3933f0e722b21192da88006ed1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a698f265fb5852e03b0a38ce572a49d9bc5d70f0fd18d975c87592779cc77571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-agounai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c366b689659bd895c7e90da7682049ef7a674aa22a46c9eab52e2c346008f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048b1056acf2eef980c215540e182efe1fbaaa9ab6732ec4fa1b584517d6d0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-digfagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fad7570d7a8b85ef30201ec428364b8a0b42df5ad992efaaeb4d2c353370b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kil-akiualabannuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c94489da2df0b0c3942e44b539b452e32d00b2abc862fcb8393cbcd4d32d8a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f565ede0f0333587dacb23409628c92e26ff9e81eace816afe4690dfc92bc8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aabi-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22a3998dec8aecc5148bc8f86ff5c1d8799ba9fb802d562c5d73162f9d9a4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugt-dafauhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90eed2cf38c8a2c1aa54f4d3592239776b58b33d4c3d1dfae18c660331a27c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...