MAL-2025-150869 Malicious code in @miptaa02/ntda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fbc06ed58c7cb2cb0907c6c6803b3423b9ecec3a52b64a09fd2124728b9637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169516 Malicious code in uaragifa-afati-uru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87550222795118e3364ebacdba3325e76fb0a8c5df5fb6b68da9ab8ae798c298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166980 Malicious code in teagood-lokina18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a4fc831dc28981c0b1ea8d67aa057e6c1cfbacb08517c6239e1eb9304bce67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152024 Malicious code in air-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674ba4908a4035106a59a61ed61aa684e04b7c2f4c0520717a06fdab3a468c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd95e0c2a71b40ecc2a65c34bc9cd71455c4e4b5ad60c5130b0f297f252a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aligaa-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b6ecd47913e5a3dd03f3189b3c4cfeac31b536786fbb2cb56b7996a62648e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-afofsgagoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53da707c01bfcffe54d952fc27531d36f056219ccf6f0c0ba9b5f57d071b204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b283d768dbc1b887d1809f7a9148fc5c48f0ed2a8ffbad88cac92e1b0a60743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobglai-januga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8184277f5598cfa6f45c5fb05cdd50f64941b7821151f58666b05b7e9914a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ffuid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a16ac5f52528148c00ca22fa88f91d0e174bc204958e0f83c7d174e0c8df64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-kalimasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96354f9930341ebcb52f8692eb8138b02ae407bc2ef807629d713c10403273ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojaugdsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23e3f9a2d835907d2b558ef8afe977aa4f19b0eb43eac326dfb865c57b676b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c77cdec29fd324b86b9000125966b5136d44fae981f158bb2bbad26bfc2263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3987159359f47ab6e508c2a85ffdd1eb20067a9d5b4079eb5c014168506764d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5145924704244854388ea82f48bdda1b9560350b417c351bca00f4c0d43ab8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b5c4aa0e57f07ebf195184e8264ebabcd6a1740d105fd7de1c9920db992ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasisto-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5317b6c69bb8000bd5b6333a4ee6724e1cb5226d2af65e1a6cfbc451e0dc3cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dajafafifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90782dfe22c53377a326fb042ce635bbe22abcc0965d9f9eb24bbdd69b385d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvauakli-nalaui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7739ad14315d6ee6037fb37c0057fc02e1cabe24aa8063d06ef55990129df67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...