MAL-2025-150567 Malicious code in @miptaa02/dffgfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc967239a23751e3db7c9a24dc3d5072edcdf092671a12d7db3ea33b9947cc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164386 Malicious code in polil-akilamu-lukiuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778343292995ba90df9ba892b5195ac2bf8e53eae75028dd1c025ef3711bfb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163358 Malicious code in nokire-rara67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c10073aa7559ff080bc7f3593d6c80233d1ca6abce3aab1f825d5bdb82ef231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150894 Malicious code in @miptaa02/ralsadzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5eb4eb3efbee5b3d679dfb557a941890a176a346257a20eaf07c531715fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160210 Malicious code in masiolan-ofi-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9984d4868c19007e9f8c07bff0e922895a1fd0577d23ea57fd7b4de9a843f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161088 Malicious code in mutaus-manis-nubli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d3393d59ae243915f3b2820f2db6f1dd105356d7720c7dc7b06f575f48f07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166642 Malicious code in syahmuda-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd27d288298fa83aaa2f57a11e1d31b88d45fb7067249e0fef1f04475bba2439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naikafuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41fa82a7c06a4aa9201ed3d3ea71957c667efff9829fe8f431c853cd77a6f8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28c14e60d33bf5c6290e506df829b042365a9e97d809f8d78028f997d04cfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in griez-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4228e142582fac35900f7baa5c0e20f88451566b0d2f49ffed7b124d826c762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546b41e54747f532100a013c4f47cc25173035627b69151b13f3fc6f6535ddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301bdfdf5a04bfa07c1385a61eb089ef6850013132517db96ed34bd404e290e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiavamoba-ufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e1fe09fd3fb55079c96214d03969d50a7a542cc686342b56b3d5c565c28fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ebc6a624f8a2bb3a21f24a983063e3d1d28c3619bc7c02caa87deff7c0c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-dareago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9a24023a0eff97407a9322658e29e03dc75a3c0a67e363ba74cbf61f1f0950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b57c4ce45cd35290816fafb59963c7235ee918ff1ff08fa8d9cb781f6b1d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-fofgaf-gaf0ahsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fde8081aed8c099a81392f0ca4dd3724d4306754bb7ac86206947045be2c1d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7d62417266edc5eb453df8d43572fd3ce38328794b58d068e607323db45d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52deb8b123e1640b7e39415b1d6f9800f72116725d282db2ebb83bde0a78649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-agoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb02a141570def1fc3bc81ca37948e9372c8812e757624df6374d9dbc5793234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...