MAL-2025-150786 Malicious code in @miptaa02/kikia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc530f1426bae40b5743a56fb4beb4a7d7b9393c4eb38c5c9a329880822b1a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151251 Malicious code in abiba-alvbai-ayubaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb7679cfce678586681b6a54b06d4c23950b341ce77fb0d8c1e7f5c4ac03820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161482 Malicious code in nabuf-otimon-g0gnf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e05ed5291177e9da71883cc3b9246ae1919d34a2cb239141569368595dc0ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotaihmi-klsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833ce062bd93a62b124a27bcd7a54eb03cfdf6dc2e74ee368e510ef65b52fffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6976bfd1e889b97527f209bd6d81afa5e5fafda2a612134da6c66ac98a27b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f675b4f8247184928bdabcad409829fe5339f13a7189062aa5ecdf185da38177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c128811cb284caddc166ee93302ababd333bb6bf01c6f19c068f11a5f02a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogof-dasgsgsusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec79ad796bd0ec41fea10d590d7b72853cae5869a6f8d47dac63e112cc38aaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16193c6be247bbe266e67a7d61bc46583f232832802f20ea9bc5b4bae92d2ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165026 Malicious code in rival-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d00ef1e53e1eb6f32406fbb7ca40958887a2685bf8da58eec7746d676d215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157371 Malicious code in kamasada-nutsai-kafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd010a0de80efe3f726b9c1517ba920ad8b3ff2350c7c8157100b2fde8fc627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167201 Malicious code in teagood-nakama37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d468d095af8c191be0566b35a6307b8774fecb5ecba4e015d2e530bdd876b589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168104 Malicious code in tealove-aruma47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ea7cdf226c10cab15f776fd8b786e1d8741185a527d1a2810f0a9859efdfe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167013 Malicious code in teagood-lokina48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfde40c68c782d4a14a99f145714ba665d642f68c392e6c9827fb6c10890889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168991 Malicious code in tehah-manst-munrioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fec82cf3fd9ba65f5d4931951acdb6c981037d903d439ce8f9189302045ec7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165203 Malicious code in riyanto-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243fc1833be239c088f4a83f2d6cb3aa0d08e85adfdc49e4b9906096cb7dd414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167610 Malicious code in teagood-nalikoli54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335eb7ee2b9fd3f2f89f6459edc2caf60f82d8491bfa95c23211d7d21329a2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169159 Malicious code in trevora-cir107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335ce03087d074533d6389fb4b516b555e8e0bdb555442a332466946dba62589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154518 Malicious code in diago-kulpo-laksi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e747ca95f039cb6fb30345bd2e4c79ea90610fa14ea6e0933de3bd7158f0a65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159728 Malicious code in mansia-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d9a2786d81f73bca3fdae863751f572cfe334b619c01ab9871a593f52b677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...