MAL-2025-171891 Malicious code in sonipopi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb9323644aeae8420b9d60b9cf12d12727ee7b690359e12877e6203323b7732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171222 Malicious code in fionabyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc3af16848d26cfad66454e4eb0b47e7bb7510eb421a1d85fa82281e31c79ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171372 Malicious code in jackholland (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8eb4cfcbc53cf5420bd7959d302f1c3753a09529e5ddd1edc50e8df624609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e2e96dcba3be0618b9d5209c8c9bf8a9c251a4943422f799a63ec0da8a37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/huoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ff6ebbb189999a03f9885a3969327b8793811d71adacde75a23134624a2277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/middds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30da189e5843022cac1577d85974e7a1c4803599c07b91cceb11349c19be24c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/miesseyeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aa119b5b3225b9b086c81375ca26e0d940fa2ccdc99b26b38f4400c5c7b677f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/miftahrepo19repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9f522be329fba94d87d3ca5bee8c71211363da535b99030bde29cfc7df6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/safda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3435bcf4ed78c69e05f062c1c4028cdce5706d6808d8e90d244b78f0ef0b5c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ad-sfsfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb212a3c250aaf213eb3f6419bde4ced72a310addd394c9d58f9ced7dbe3c2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619420c9ac2d8d81c2e667f6cb740efb5c597fee1295ea1db4a322cb7b87489a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wbzoslv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9773f5d3d08cda76417cd00c72d39602b06d586625378491919ebba555ae3ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdhae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd4be7c77ed4433990f0dba53838e055ada15199a022705d6a61746444feccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de7630c2b5cc60ddc1e511bdc8214a4222fc13bbc67405092816785a9700b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fb0c805b6e23d5bce3d7b3ca7cafd2133228225a27936ccaa5f1bf918969b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ikadasao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535a293c320995bafa9140f8150743ad2aea12856d25d883b82c2f6cf3c1b18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/masra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9713b77d634ae518af0abfaeb70feb8699786765556ea46771676ed815cb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b465fdbd4c69e18c5afb7190097748be218b78b43840d703dc8a6533b8b6d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0f9126769a4fc874e878b67d38598675e7b5ee0f3e4e4b91e0104593cfe8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...