MAL-2025-152481 Malicious code in alvira-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5617f4b1b2d746bd652f17ab0e7ab5e2c4d4ce1ddc577d81d0616df63d00d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/weaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d8e9d4c21be51e07d0ca7efee32851b01f6a020a794f3ba0364559e0a06f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/isafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6294ee378c5ac6737b27adc786c96eee83eac7a52aaa21bd0d996854d478e12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6455278cdff6eff9cf0a8f0eb772762bf64bc988c3f28fc084aa1e251e40a035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151856 Malicious code in aiboa-molipe-aramia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6514fcf87f3d40d0b43ace4f8b1a2925e43b88f5552aaaebabbe780bd06b13e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158906 Malicious code in lookingan-namalaka9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab72603a08b19e8506fc5511f68d91dae85c75e506e604d815461e8deebbc049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafaru-tauhauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1547c22324ff7c051675d28298468880c75da7e9c04b0dd931962ac54c8b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-muido-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db636f335c9967219359ab37c1a4672992b9cb3d1aaf286498f2e9ea23d535c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898872a7865d276ea81a9257ae122f8029ecbf0865d606d0ac1079dd34df8a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-nurts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442498dd03307ac74a89dcc3578f25d191c27fbc89b06f60bcb87b26ea063dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46aa89414aadcd9af62eaa183ce815cfa4d1d50d50a31da751ca20f89c2c7ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munya-mipt-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dd19d0f6d47a25827e42453ed7fe497a3434fc8af0e146d7387a87f62e1118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3857960a7b5e4e13601965b288e1216f784c37511274584763c29ac6f2c145f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-mec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fa9b47869c28dc4208e7ba320ed63dc746289c75553c6eec0486872ccd1e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95037d20547e3f7ebad1edd206d87f4e3b275b9aae2c0883df747ee2783963d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-mansis-saintrsse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b6993ca5422621eaaf01f78a57a88be29def2c1c15ec2e630aac2c7d9b9a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-marimasa-nutat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4232a11ca7828ee10c2025c7dbe334b5a00b27d8c4a95c71fed8ca76981299e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedada-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cba5649a63aa74893840c7b7ca29846060e350f2b64d6b529320185eb428d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27d8fc69d6d535500f0ed69235a5f7a6e0db5f2238ca1317abcc3fd479bcfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b85508853f46b7213a9d8f49ef03e2195fd47eac6c9d0317f7effb4292dec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...