MAL-2025-150720 Malicious code in @miptaa02/idd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df6d8c2013e24e3a393c6442f566c084224643cc946955cb52be95058f0da9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161540 Malicious code in nabuf-otmbian-ifonabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56939cfa881e421055e41d897b8c0131c604aa58c25190fdd88bedd7e9a12d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158078 Malicious code in layla-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da46082f5805d04c6e714f63158627c48d3f21e135feb960c0a28997f3e840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157620 Malicious code in keyla-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e48ea330732be1cc4dbc2553a93cbf5d6667d8105a56bf6969bc7770ea66c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165169 Malicious code in riyanto-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ae2343fa172595a84a748818182ab8939dc3e54c99fbc002518b364a629b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152356 Malicious code in alita-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d23e87cfccc188d933fe25aebbfa9c1a18f4e7a9fcb0ef2ee2a5b881eabddfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170217 Malicious code in uyaudtu-tauuyut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf6785b067b5c2ba4321cb1a2e9a97c644de8312baf9c57f58a6b1d014587f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158992 Malicious code in madan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f973dec5c14b4f1d0f909445396b6fba46de816b4277c4734e968c6db7f8841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb90b4033862f8d546b522582c8340c68b1ca5b75703fc4a3a82b4178c77d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1698a3610c5be4eb5637c71ef6708150c25e93ad91d19b38ace6df5a75eb9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b1c4644b2d81335a7edf0b6e438426ce271599be6bf38e9a342220c820384f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibook-ikalabliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea3dbf92eec2b2abd82df60c92a313c542214c6f17cc437885a1f06ec0da05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9115d6de03d2fade79d6b3727ec47923b980bebc94a9f05ed0c9a9ec8e0ffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430e291b17b0deb6a10c7696d83874ffe6c598966f1760deff03865883dd0a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3730ff873ec4abb1c671754e0191c926e8c106fe67eee8e5b70c8168cef6dc26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4927963b3c52c97d901e87778208a98ee9b6fae25d65d5a8e439b09722f5bb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakgfrae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee3009f5fd0dc2deb35857d5e09615252087efc056071e06bb08cb138ebf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kaboloki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10081f12a3739b7ef59fea47217f68dc3469266d228809c6d7847bb0f1bb9d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoi-kinatmumolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d6dae45ff6a86e6a2414886cf33b62fb2aee333fc03dd78ad919a0dcffd476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzmu-kijnuhigihjani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c16a1116ae92bb7b71cbf1a97f8904d1010ba82c3ef9beddf06fcd86b877329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...