MAL-2025-150765 Malicious code in @miptaa02/isweg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421f17b409fc696b709126be5d2597252e8df08d2a68aa22e2fcd84f940b5801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63275f8cf6b568f78bdd9b43df7f1557add0b45d97fb967f5b370d01fc81b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3230ae0313f320e582abbd782027e718018dd2f1773e2dd7006fa41713c0eec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuytad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028fd8087bd5cb53d0565a295f8b8103ce95290bd40477f9400dd768de5f689b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ed6b788bbd7a36d49f933c93633536bc1a428f642d49f217b2296c8a898c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milisa-mioyayf-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba51c227e6edb5865be310e9c2f77c83d629e01090a78d48133a33650455b736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakaogfrae-nha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac4b27fcd74d857a939eda70d42aaf9bf36869e8c6b4830104ef79f2889ba57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70642fb94c2d751c372e12f5b055135170ce017bf72cc3554829b73a69abe3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimoaigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b37634e45ff2d75e7ab2cb02585cb6ba524e07f15ca75cbacea94760de48e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciydua-idusust-daru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f7fc93e46140ac77c1ce9e76a5739000de902f07cdaf10bdbc55aef5a72dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-nutayadada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ae5a4170d7b1ad56e5955608d29c43cfa983f62818cbbbf4fbd6254f7f3f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beea29a05c6bfb0342d94ec10bda3563e29d9fa19c7e7b34e5ad36dc058341b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-ala-mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f706360039bec7d16f0d06cc9818f2269170aaebcbc4fef79cb9662d1bbb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153969 Malicious code in bufpani-muisyau-fnau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d05588a3ba8aa2786e6de6d6e4950e82807711222331f3b85a7dd5fada0d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161903 Malicious code in nasrul-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea86abc943e37cc7f8b5dcfc064499df553b316548d70669a934b03b3b23ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163862 Malicious code in nuilava-dakaodfrae-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bff3222893dcdc931c4987037f1b374279bbd579d462ef5a4ca40b4c7e08a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165292 Malicious code in sabu-nali-luxfbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e64c410be3ad9be04b3880ef64e60e84b98e0493e1b2ef25c9a15711a87bbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151132 Malicious code in abel-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f84e84c5b37d961e5a207166c02b7a4a8b9756f9db800913e3b75b53e5e60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152711 Malicious code in angin-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6871fb8964505144615d6422f003eff7e76376e2280aa213485eca152cac177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161272 Malicious code in nabila-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcbe3f7eef5fe1fff079af0693eb58fa16b2501032a9187a4342a424aefc41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...