MAL-2025-150319 Malicious code in @mipta1/yisaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed91f32ffa1a9c64b7a7df3ec039e9fe8637a76ef322e09bd2e9231ab0a6ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164187 Malicious code in pilka-luiu-kanni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254850803d454ed369b026be318b36ffb808777eac3e72bb75238144c2868d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165210 Malicious code in riyanto-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6446f073a606118bf987da9e0e5e728134f202ab4f2028b5756cc6ab4949ab95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162137 Malicious code in nokire-abimanyu25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a21ab917daab28aa62f6fb91f4eddb39c9607076816d8a653dda9cfcda27274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151640 Malicious code in abuylbani-nikubamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6b2c3e995fd3718dfe784d17a3d4aee2aee6228cd96be1165eab590623906b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164551 Malicious code in prayoga-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8ea4be02048383153a13b51174a3c8f063a61d689a6543a9d2be3f38a5689e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150531 Malicious code in @miptaa02/assyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451a74d31abccfa415482d6afab11fc66f3977cd88e284e05d4b025111365d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-koreasela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6ab02e640108ccff5d2cc336972b09e2bdb824ce95f8dd152da086f6bed8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umuaialaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0416e9660b4ade02b9ccc3411c4e73462ed73b1d316ec1c76d857d35eb93ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-manta-nurtasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304ca8e1df37a438f177600cdb79ad827757e13146019fbf3ebbdc5dcdf93fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64de01da0008f891850731672df906c328ded56c3967494eac214eecaf287c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2de821e88d51f1136ad42184459e6b65109dd74bed04d6668ed80ddf21468a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vakanain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dfc6e40f7ff8c87b4aa127dfd6e79e1e43978d12fd19dccdee0ce7519d63e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulaibknisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660a237c158465ca73bcc88cff8286adc56013d0cb893a59c74627bbc9bf5f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72b4c55653d75c7a501efb5de31e41baed2598fdbee9322ab46f396cb0b00a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-coo-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58a2068d127d5a68a79774c5574204058cacd52ccb0e687079f64a4159764f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59d913ef11504b02302e91319edf9bedbaccc9794ea294d42430d304cce2f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manila-ala-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e519c1fcdf423c34192404426fbfec86da7bbdfcad21989db85d727bcf56c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e49301af45a1ca4718b2032683688e969e7f4eec4653b5abfa847036dbbc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-fuf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d74a51f9439f9123e427623f64982b26eb67c5ebe13c47d118af7ec40ee87bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...