MAL-2025-175321 Malicious code in kapvino-sofgdi-gagofgfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f44bdaf19310877a3eb01f1038e0729f2ed25cd4cb1617b9da2679c3f5a1ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175984 Malicious code in miaandss-nutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d291a346b689e169393d19a35bf24e0771fbebba959c1fb7604f967522c2ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172354 Malicious code in guide-matila-unpaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5fa7b087e8c499726b252f80efaa9bcd3bfda5cf47923c63d901beb4f4479c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172501 Malicious code in namesi-maivla-aiubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4df234415c7da88fff136fda482639311563406d5645c2d0edc39edfd3571f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170894 Malicious code in anouarbaguetti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d530e7956c8d3940d2bcc2d3883c6058cf7d6eb786c4191edfe6f566650890ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171292 Malicious code in haniibahaniibaguettehaniibaguetteguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d965ae5db5547c12c84bacfdd8cdb7ae1f6d8989c1653b5cc3d6deecfa0a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutr-sds-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ad7daa8be4eb33bdacc2174a5fba24159ca4ca248163f7e50929522f66ffa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a4b8a288cf1ef75c4eb56a9722011bbaff13a72aee463a16682a6e650882f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a690a6301b012302ee236db43f628f3568d5be736dfb1e04581e86a8d93f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c1dfe60d484993e580cc5f364dfaa6b915858ad6676429ca76e98dbe39af46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3682141e8247194f2e1cf866a4ef61401ba519306d5954cdbf890b609da676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d517ef6b3089326b5efd89621e38f69ea646fa120540bfe490d2678ba056e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96999eb79abb43c51922173f055cac4626b2741eb720bf0202c427ea6fb2a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea523c7a8c2b51591dc8c2787d10ea30ce0d89641014ab3f2979e246625c7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alao-mafadiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053a313b5a3ba92638049004049563cb2852b499fff8efd3e2653055badca1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke150 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4edb937185180533fb2b58d26d2f0ac929a350752a50e599841578c6aedcb9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7682d84093faeaa4cd6dfc24d1e97e68147857300d683fe1beec6f4ff52473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b408404cf07398d91f0b59377a2333f95a275b210ba2b860f2ffbab2a8944ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luiu-kuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c450e3e6e31563583b25511fd15dc5c4fbee9f5b0b2df38effe3be9fe01be371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...