MAL-2025-149917 Malicious code in @mipta1/aisax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078872005200292f4cc50ec8814787a3910dc95ac01f512a0cf99f8432b3b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153294 Malicious code in avminh-afaais-ifafoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a686910d3b6abf95bd9a0524e2c88718583d2f5db4afc7a562097c78529c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c44d176407d4da9e7089ffc57beac03e520f4b3605991078ccec31250d5b2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mehanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1e5db46a5af95bcf858151158aae4142b0af996f33dd73b3ce8d685b8ae8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164808 Malicious code in rinto-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca7b3068daad6d2d7fdff23cd0533f6c6341da7eefa94ecff3d6cd1c5e747f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163937 Malicious code in pajero-cir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9e368006825413b6fda3771ab4a9322fbc2db48d84e836bfe7d28e6558d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159285 Malicious code in man-nonatai-autgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e112da77f985547755e98e17496692b3948c4be999c45486bb5661b5f5364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b2cdda9015f87f42b6371128314e1f1d67b9b1ec9c7c6103ff9b929a2e4e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168429 Malicious code in tealove-nameka45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abafdfba33ddc3d6bd556dfad44931e6d2ee8c3bf02f0d4564809002164a9f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161713 Malicious code in nach-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ceb1ad51888d7ff2f12161d6b80705cee7921cccdb0b082dfb539fa8f1eba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156413 Malicious code in inal-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07c7c05060558f7e7247f093f324ad10948c52a18feee2546660ed13739365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfafu-dafumfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e0e7b43c9047beae4114c48629204b17861ee3a03962c3e5556fa1fa2f8cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157358 Malicious code in kamasada-nutai-kyased (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a629937fecdac8487bc8f413a3331ddb6ecc5b2ef06bef59820a7c52b6c83d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-browserify-pino-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ee931d298510e62cb53d15bbd3d6cc32caf1a15481f40bf9b5643428d3e073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-release-it-delphinus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9723dac1015b770186c13a25fd43bc6378a218746a96c2afb664e0faf6941f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139287 Malicious code in aldebaran-zenobia-package-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d5bb8a735237ea7373c3f507ac04632de6eb775b54c59acde7690da38a86ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145652 Malicious code in nova-browserify-airbnb-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b65f255f4a3414fe13133b5affd54ae1c30d0b4c6bdd824edf22015895b69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140887 Malicious code in comet-procyon-terser-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b417566f91d2d0997761d52bf5ca6f8226272728c5e87f708ed8025832c4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140349 Malicious code in callisto-readable-europa-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9db60a5246fcddf3c7698341dda6b5fef26f7659978b69669b34dd4547503b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-hexo-zenobia-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934967d7940b8009db69a6f57f4813c107293a76d651412f11a90960aed262c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...