MAL-2025-150459 Malicious code in @mipta19/wbosv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9787e53e58f984763e476762f5f3faf5df0cfcbe31861d3b3b84874a8575d03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165966 Malicious code in siregar-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2113588e935a945ac0d0a5b278c0b6c1071138f37d3514864547ff9e3693d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-afifsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b105fa9ef42b2525df8d857fc4fe626546a9c85534a865c1a5f6234303703f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoiki-nsntabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74b785d009aa4cf823961bc128220d3002116f886a671af029b234ac94ad1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysa-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59075b18888b28ec66b0f54e48d86e7d8dc786ff03be8524ffb1da70723adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b36ed009609d2d36b1fea761fbee071769c53aa85b361336323b779c5237ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163506 Malicious code in nokire-zabuza19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db2896b70e1e6ce9804a65d636aa313f279e1f17cbd6429e9634d9da56ccbed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169119 Malicious code in tobrut-hen-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b0f2b18ed885bd56eb53496c01ded3cfaeb84fcbf51c1141905641ef554872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mudifafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c586162e63b3b4ba5601fc9eb7622645bfd0f5ec3150866f3158269d26a0ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ertacssau-tery-munche (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4031c3875337531f4b22e4a261167c7c314825437486d11b4292b09eeff46829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkotti-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7883dda51d290e3b74f3ee4144309f4e94a598264a99b8f709ead46f517b80fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347b7dcb8b0355c43d162b7ae995e379d8bbbe68bf7aee4d698b58e8928fbf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofuratrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70eb6a3fff04f5df391bb447f76aa40674708c65ac58686c1bf1bb86579c879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167184 Malicious code in teagood-nakama20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4336633a9609eccaff4299ffeb1f5d4b03f96a5971a297c9701984f86d065a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157938 Malicious code in lala-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b820e787618fd2d3d956bc79c469aef8ea306f4c93597577e23ef27bceaa53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150180 Malicious code in @mipta1/qwaea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a472d8fb6f5eb898c9b8fd53881f4abb3353b26674068baefda58617ec2a1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154163 Malicious code in dajouka-faa-sa12a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6793a7994fa7d5fe691663604d0ae48dbe137c0e57b95f23e1cc9fde62eac37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163674 Malicious code in nudalea-fofiri-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40cf56861f1c92397ac22fd648d693f2cb3db2b577b6a5bf3550c7f0200c52ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157374 Malicious code in kamasada-nuyata-bubayati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c113063ef96725db3d007ba9083fbf804961a5faf1cab2c06c28f3b63213ebe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155830 Malicious code in huda-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8599e5e2dec73e26203d472053f60d1dc061a9093b7772b59196b5151aedd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...