MAL-2025-150995 Malicious code in @miptaa02/uwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b8f1a9c600e6e12cadda516f83d4cbf089e0320d3554b35bfea9af8a8e881b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152397 Malicious code in alita-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1a69344b680a0a8811b40ba4681350c7212cc3c4156f0f4e73cd33ff230d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161951 Malicious code in nasrul-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def6ba4744527f5d8b6eca7f9fd36e50882078d2bd1390d58cf8e17ed9bc9454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158761 Malicious code in lookingan-namala49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee33b3f96edb94f52e37d543ad399c2b7a47abeb07427228d25c8d178852af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164283 Malicious code in pitra-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb891e20d9f633feca0424e4d2d0e404e593c965e9c78d7c81894423e591f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152756 Malicious code in arif-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c57a89dd5efd6039fa90c8a733f3afa8daf84f0cbafce939ce95e1e0649ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149997 Malicious code in @mipta1/dxds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fadc474dc80ebe47ed2d91a6e5d99fc55a7c7e90c56b74c798dcfa373dc4755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd9fd2ded300a84645abef264786296780f0667271ccd13205e312bf1eeaa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-klp-akaugaakuui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956dd280b85941220b88ca9e29cb510420ce8a45e93bdd37c416452b173624c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fd9c9beb93a2f0241b2d372e78acba16bf2e0be4bcfe68c75211bb456359f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9965f44e4a94bef7897aebc91b86c422fe60dd9a04f80c9fe80abd5323d506dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6837bf300a598b70b351dbefba18b40bc332ab41495e3eec9fcb2073be182f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mivafifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee4caea49eb8ded4ba560df8f2cf79a1d10c6c1f904d0e0d88dd4f09dc92271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71aed989111656ea2c272eb1837f9c2ecf5f05e1959df3070ff93c3d3a7a85d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauf-doikof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3884322bd0415e14f471d2b04b4abe646e58535ee9e42d20fa73fa04c47bfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e62359525b92455dcf303cc6477e451d7efee8308b1926d9e9a39d68f97c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mus-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aaed3f37853c02a3dfc1f3254a6f34f4199ac97c9cc9acaf02b4b9d400111a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-ups012uszgxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b590d233e675a1c73a9bc8e538e7b6674f8d39a3d7f94c36e2924b3aec56bf94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ef14016babb38ae9b908bd128172debee2a2607cc864e2f0c58e2ce55019b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madasazlohiakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b227f2e550178f8c7f1f47217fa373b44ef39832c39bc307ea7164065a3d4568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...