MAL-2025-154636 Malicious code in dian-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ee0742dc652f93735573498a9ddf8b9a7cda44ef6bf8ca9005833d1b4e7bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161866 Malicious code in namase-namuda-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0584ae57512433fc611c1b26165c4c076d594c25ad97f8e011bee771e03fa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150957 Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155183 Malicious code in fitrok-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509837c3dded77f43f81ebc172b4a370f5c3ff0f4cb1b98854ec02e10f9d26ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151030 Malicious code in @miptaa02/wia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a80c8c9c7bd277a68203abae05bccbab756bbc07ed1a127fad94392c0c290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160844 Malicious code in muklis-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022adbf677d8470752d4c1e10c29f5dd08d1fcf0969cb0aad593d2e3ff37c2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-aluni-ipbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bbee1762bb2cc3b7d86645c948a3c53df3ad665d45cdefac72837bd0cce1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpie-aroioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fc96c501b492d3131938831f9db96523ae595c2f4c770ca786c576cc402e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9827df1733cbf29b6cc424762bcc0b9d031b64dbb944d6b08df58e96427a6395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586f20dc9fd92cee964ca755b7c6a5da102f09786aa4ec1288e69bfa23772ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9007a12da2d0ab2f5a604c6eede1ddc125a954c03c51a895e10ce2f3b8832f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-upaimumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9693ce0bbbe745088a53060533c005019cbe9c000b0a46afdf574347e0e96095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ghdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a4268e1cd30d5b1fc057b7ba0ff7679534eba95f4f30cf62de6c943c08ea20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9b4f39374d9f313e1f09d3b3afaf604bdfe3fbb51b59e5f171306f42f62435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910100d435909122e3da6a66bc1ff91e3b18d86511984aa28acd8668ac7a0628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79321dd6ab42ee3b18eba6b5233d2dfd2645b487905ed65a2440a6639edbaa86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156580 Malicious code in intan-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838d05bd2206a1db10ddff3753181f982e5b896026fd487e0da153d4ec23b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169450 Malicious code in uafagarug-muafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5685e25958a64b403a6e4f6ff6bb662081a710dcff4f232d73d52269ceb5f9ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169779 Malicious code in uinsnu-lotiupmi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9672f66998edccdd74c18e88b3ff246f1309abe42a1ec1f8072ebb9a90ee014a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152824 Malicious code in aril-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9564034ec338ba77067988390a4a5d3872ddb6836681dc84fca6cc6b2504cc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...