MAL-2025-178879 Malicious code in teadod-mipta3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a712e957afd08c0c2cbffe0687f59cd094084ea339d9e52f1d209f48343b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175553 Malicious code in koko-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4e0300c13c2602470e67f97910db22e22df755551c6f0583e85e3e50353ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176074 Malicious code in miftah-miftah28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5007f2eda04b508100c1b91de9c2bee8d17303df47e0c1cbe0458e26227b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177486 Malicious code in poglymer-ognagh-agammi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e28f7654891b197d44424ff52866245a0dbeeeb19f6d1aae7b53c7b9257577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177024 Malicious code in nuyar-adair-biduran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da71015b21d0d690b48c34148b952411c7dc4aa809ef7a86f3a56dae026e89dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172591 Malicious code in verts-otimo-nagigofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a4384785bf87c6d8487771f08bd638b1ba700cc0b432f27ac4011d3719e055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aimanrashid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ab1000726e4a58d45c33164495ad017c6d9d7952b32ccc78da4eb0f8297515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maireadflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f29eab3b427c43c4e1c706fac60119bb4186f8d513a0ea867e0fe817dbaff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171346 Malicious code in isabellajenkins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e12b7ed032c6726208d2fdfe515d53a55b8d7041412ad95a354b76e19f238d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170818 Malicious code in ameerrazik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4d1ff2598b8ff15f1ff87d85284e1a408cfff2db1c28f3404cb7915749ea7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6b3a543360609e64eb164fca0487c096161668591b149cd528e890f56b33c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b6c50d950c3e3db6496969707f3079de9e1b2e8fb7370e94ed89ce282c92cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdb6f47b389095664f5d6f2da42af7d72267df253ecd51a2aa97c0d73b1b2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-tr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7911f4d93e998772e1167ff0cdd3bddb43d9256fb8031e8fc2c919a7620b4ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gajfohahagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e9926e75799e65d677ac1b65619bb374298b1008d6ea59472a7fe158b171a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e7279a9468a9d63c6b96992900bb408b6f084aa809ec7760fa8a3a86db8b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-ddxdga-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b02496c3f5a545cc4eaadb23975216a9854662ad701ad3a9b050482b945e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-intsi-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6f6803fe6fb84ac1a8eeb84ad8e9aa2d96406644709facfb7bbf0446bfeb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gafobai-jlaagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66214b581324f1044e34c98b548913731f26cfa2d809c9538fa7c6390ed64a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tsfdaa-t2a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba5333a2fe0ca7dc1465c475104e88e1d303e3c42b30b225a911b29cc90bf3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...