MAL-2025-171237 Malicious code in gabriellathomas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0132379f3b59dbf651ba4e1db6176c864eca3e57fe2ea2d1e6f409ccf4631df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171533 Malicious code in madisonreynolds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831622f9def7a21dd12554aa06fd056d0307fee178788b6388ec31e8f3cdc485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171444 Malicious code in kashifabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2088c907bbdfbd0e18785d48f11a570fd3ac413e496436c33d1fe396f14db648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ad-ajfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecdfce91af87f13c99ca475201bf32cca8be1bbc2813af9be5b938b25e99e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ajyeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc11ce066e76929b5c93c526fb9f27af25b6d9189bba752f32caab9d7359b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gaxzxody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf616ad04cc24ecab03d08edfcedf9c4625148f8dbb62325e583847bf1040e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-aranbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfced3351112f59f2de65399abc9e6546ae882e6b62536a2d6909aed56a89917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad65d546a495d5d1f9f455c39c3a61e60c67c69ec438398f7a68dfd1f633d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12f-dareaghaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b58482f979a692bd51310ea467248cb3f3bfd5b36e8016290c00ad14eba324e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6c15d22cbef7c0bea26c1e6569bdfeed4a66c0f3f6ea5e9347fb4eb384265d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-affaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a6c2f5e57b68ebb210bbff151910c847a7990e36d5f461b78221203b389546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144b0195355e0f81b96ceb70c3a5ef69c2b51a99d24cca9f842b36c1e6e9c80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fodmfafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120e792440d245e7d4c5fde052ae49a185fa847bdc26359dfa8b7dc7e33abca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedad6e94ac091c96cb7f0daa2138b44031222681f318bdedcefbd861b63e939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a305256ce9481b5cd22ff0a2f328bd87bb7187800d416fcb35d2c9d924c8a2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72a3d16312f1baba98602441e2c08359ffb1393cd6485540450da639b70a6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carssa-tyutu-sdff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1b2c0b987d2aa4714c02dc20eaf5ecc395c47548bcc120ce9eac42b3929cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fcea0af0c24ea1e12decf47c177d82558a2cb78c1feb025c58a00a07e87e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa1sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c972dd560589a03209dbb562fbcb5a195ba83e08e34ee3c7061971020c657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tsfdaa-t6a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86af3bcec1d9300a8670d021916c495b8f67b4a986a2b91e325b0673fc449d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...