MAL-2025-150957 Malicious code in @miptaa02/sxhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372c71d31910339b01b69cc668f7930ca0a4b97334dd2365fffd36d3ca904d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151742 Malicious code in aciyua-idugt-dafauhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90eed2cf38c8a2c1aa54f4d3592239776b58b33d4c3d1dfae18c660331a27c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9827df1733cbf29b6cc424762bcc0b9d031b64dbb944d6b08df58e96427a6395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af51ce55571093383fdfd4fafd75c12cecb03c33b9cc550b734f33baa853448e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-aluni-ipbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bbee1762bb2cc3b7d86645c948a3c53df3ad665d45cdefac72837bd0cce1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9007a12da2d0ab2f5a604c6eede1ddc125a954c03c51a895e10ce2f3b8832f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910100d435909122e3da6a66bc1ff91e3b18d86511984aa28acd8668ac7a0628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuibanua-mibiian-aruyasta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f03b70c544c6bd3d5b388f33255e0690bdb1a4f852b6195fd22639c916396b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160984 Malicious code in munya-mipta-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5397778ad97d081aea686981cc0bf2748513f05f011c2db961cfe2db2c3a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160401 Malicious code in messi-vutsa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf889f317b63120f201d9531ca58d466e32736f2a63bf5c6c9902ad168e16d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160983 Malicious code in munya-mipta-munaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865cfff88bb13c34d837aa909c5d3511e0e2b8292e7d4294903aae6007d4468a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159835 Malicious code in mansila-tiala-mdfghlni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aee83000b7925663f826641c29981b45adfb050fe05f25fa17ad2b75c0eedb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157067 Malicious code in jimmy-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432a75624c93af3bf7d8a3b5d5a312adb7f4b40b303596bad643ded926f0e3b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152824 Malicious code in aril-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9564034ec338ba77067988390a4a5d3872ddb6836681dc84fca6cc6b2504cc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpie-aroioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fc96c501b492d3131938831f9db96523ae595c2f4c770ca786c576cc402e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d8de7d9ea35970c288d0f363e829369e068d342062e77bc41693ae0ff6e7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ghdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a4268e1cd30d5b1fc057b7ba0ff7679534eba95f4f30cf62de6c943c08ea20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e74bf7628a17f0adce99a25ab0bdbe4cf0e36362e3e048436fee6b18d3e8987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eeee98d6abe12c377763d3f803892bffbb6a01511f6906cd42f65630bbc0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77faa24731eaee1e69ba3896120b1a294748234483f4481709b8b4b81f2b572c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...