MAL-2025-152497 Malicious code in alvira-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7c0366776dfd45367ad7d710510e7c175cbcb5ef55babddca83a6120255be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150719 Malicious code in @miptaa02/icdgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5c062467e809e18788002d26e2b0dd12d053f8a8609bf1bea2690fccf0c48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158877 Malicious code in lookingan-namalaka63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837105951360e5130bdb46874771961da155aee52f9fa27737c0584095fbe7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164004 Malicious code in parwo-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a6db169474ebd98f27e29c9be70dae713d668ca774e800a5b7c81a07d14ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd77b5f5e81b950eb500f80f2a2e06df6d62185b3b9885f77619d18e580ebfb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokigragne-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f0a98ce55f7a5e0476f2bee8aa563b38de0587815579e34a3ad7f2ad3176c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf40dc6a63e877c97edf56f5663c9adc12d27ff0c685b80fd838c67b9d37cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27875b75c1fc91744752e50c1db0e22971a946aca6382664294537f726e1debd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-butyaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5668ccc6b69de9135a9401444c49d801082be42afff00d9f08c88500791f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13cdd3784ef6be80436f75b596ec9a11484d3c5bf74285d32489cbe279bd979d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomfmadi-munaigaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b258b7833907bfa9369353cabb5cda1ab8ad8edc563f826236b6d22508f3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulikoniuta-igugkfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ceb40d97ccf809cc364fe1a3fd35eb9c572c928de4c4302e9c2d77b8aca5ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-dgds-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969c958c342079f989e9df08cafb4212025ff4b1b18ebfb269b169d260a676f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilpe-araunsuiogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbe433bcdd03de9e66676b82837641a8a9fce27045b10f5ec7d7ca86eff068b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 597ffee1e53a308697949bfa0e0b0c531e003c70b2a8aa82fcabdd422546dfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016b219f1384278e3f1ccae7551aef8b76baf754ae567e964959774ead17397a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163701 Malicious code in nudela-aaaf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cf915e617fc45d0166f9d289da55dca38c478e519bd959925906341d2c39e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150650 Malicious code in @miptaa02/fih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dfc77cda7b37c400d96d6c4d64c771dd41ae38082f1c8a6311fcaf6e6f87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162961 Malicious code in nokire-nakala100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24f27fc13acd9209977b3f78e072f7bf522f542217686c7738a471ec072ea1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154136 Malicious code in dajouka-ad-rac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6531589a8ed235910ddac0717d218f5bff765349d15f33c0101677c2af22ba0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...