MAL-2025-175841 Malicious code in lia-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b446075ea6e90be552fbf306e7585cd07998d06205989cf20aa15a381e2a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178365 Malicious code in saaaaaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcb04b0cf7cd50fb9d71e55fcdc5b8f22e2aa088f9efe3cea8578bfb524aecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172093 Malicious code in apasih-ledong-pok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd597209da4c8178049cc92f28e2dd80ff3120c1f3cead47d98d4e741ea6a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fionabyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc3af16848d26cfad66454e4eb0b47e7bb7510eb421a1d85fa82281e31c79ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milkywayscholar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd25a8298c819ca69b80f45ce12c2d33e1baf779920aea2efdcffc0e7236784c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170736 Malicious code in aimanzaheer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab572bcbc2f01c1d937dab3ea2faa55e53710fc317c6cdb6e8aef0872ab72f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170953 Malicious code in bashirahmed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d498b7552ae13b5198b95c141bee0f06ce0d4710516bdfd994e4cfa2a3e868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abulaziz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8680f0b42c4cd03460cd88a8646d54887f9c74bdd2015dedef7a9293e14a6f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171083 Malicious code in daniyalabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f878ff96a91035d132a44304aa072337deb9929a5b31cfac776279c94715d568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171123 Malicious code in eclipsecrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6844c495beec3d739d93f69a08bf809e9af294740f1c3849d0d1b81f40099be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170978 Malicious code in bilalameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd816d4e37940a0f62a2ed72a19f2ed53e27520bf57c95fab5cadd7f0de377b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171053 Malicious code in cometdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d2834959ec7340fad3d2224a9eec1efd6d8b8a0f39f7bb43080feeb60667d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufai-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcba99a57075217a17ce97b2d94d88bc9aefa3e4f93fcee820d27848c094023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b3456d7f168037bbf26eea55118c48e61138c506eb212c03b6b017f919c9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d67cdb44c08699dc5a94ac062eb834a1f2efdc1039950ac93c8b61f6f991ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155346 Malicious code in goodmanmax9250-strange-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f15b103b79b0dd7fb98f8361d4bad68091eb22e7e0c760a68ace301860a83d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150385 Malicious code in @mipta19/ns-o1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d7f47d2a091bf2617054f6775662ba5169506a0a17f13c3a9366b2d6f2e8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8807d80108b36413eed18c0533aefbe03a4aa4d092fb6d27fd1121573fa9b370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e5c791209221992ce36e0bbbf6c7ed5487c3336cff4939daf588e9f08f816e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1380ee5bd0b2552dfb5c18fef72b5b0ad0224387448c195d12ba6eb1f2fa20e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...