MAL-2025-150557 Malicious code in @miptaa02/dadfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c00e54b29699040e7eabcf444c969e1dd6b1f9372a24350ad83163c7e7ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a8a6fc7fd13dff20f831cdcd2128eb352bc526b395a06365fd3a1424dd83fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160407 Malicious code in miftaiky-few-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a0b4d3ed47408ad05624c71f559974b2076d74db000b810d81e5c85938a570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153791 Malicious code in bintang-tea41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a681a5d31ce2cbf9c9cfecd4c65b7b8c5a2efa3cd32eb2286087cee958cbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156742 Malicious code in inufi-gobai-jagr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b258117409834caea686bf8b68297c1f63769e02b4d0a8040d76cbb7d183aba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159558 Malicious code in manapf-manta-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae27cfe35ce96acded3adacdabbeae9151f42680acf66d07563d5f34c285905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166510 Malicious code in syahlan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca333eb7fa88cc9df6db7ddcfa724d37fe733ca4791e09389a66d80cf90a3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152764 Malicious code in arif-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9a059ef119eca1ab48f46e9b6b6357437ca7b94926f3aa3f1f156e1fe0b039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161325 Malicious code in nabuf-ogauof-dofuafosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9163dee36559aed87eddb47b7cfcbaf4186cb4a181dc2559270cfadd5a0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150475 Malicious code in @miptaa02/acvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c2db1a67b9bc1fadd1632316969e6d8688e2106fed3c641f92aba1e7e33f29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152883 Malicious code in aril-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6e7348a03f45ecadab39ddbdbff14687ba962143c8221856f69d2eb265248e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166580 Malicious code in syahlan-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcff5c39fdfc621e27cce56dedc299b2674d02d7083c8343db74624eb4058a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167546 Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154525 Malicious code in diago-kulpo-luai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7156c39f881db38f4b8bbc68635c65bd62cdc1d66b7086d511d8520cd84e5470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161062 Malicious code in mussta-dfds-nitrfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a62383a84dd8f589fa98a20537b68c931e5fad569e71a23c4fc5a1b0725c4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152038 Malicious code in air-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfa9285a9103f32549f361dffaa6064069d18adfbf53c6b412d2866f58ebd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-antares-lyra-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b28aaea22b3b2598d3e2ac8d5c042b517287b7edf5c994b14e88eefabc0a15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-procyon-redis-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6fdc4f0dec8028c29094b0260a239dad14986697d599671509e7985d30710e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-protractor-ariel-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13fd03154d71a25bfffd817c62d2ed9b024434ce213d48112596407a8e63926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...